Hey #infosec peeps: how would you suggest tracking who ssh’s to various #Linux servers? I’m looking to keep an audit trail of who was logged in when. I’d also like to be able to produce some kind of dashboard of systems with active ssh sessions and who is connected to each one. These can be separated systems but do need to support #SelfHosting.
npub1p96h2humf4kpz2ud2jktgvyhpq3cq3jghuntu38ap5yj6ass3g0s5373f4 (npub1p96…73f4) & npub1ernndn0acwn9h7qqwkk8m5wnz7gc5vp0sqveudhustnkw3ge0uvs3n75le (npub1ern…75le) - tagging you in hopes you’ve previously solved this
GeneBean /
npub16j…98z0p
2023-09-01 02:48:01
Author Public Key
npub16jnuhq6fcxreyn4tjkpf5s6saru5v083mwy39mmpf8ykztrl0hrsa98z0pPublished at
2023-09-01 02:48:01Event JSON
{
"id": "e8ea2b8c2ead82cb0b20dcc49aafa0c84a3d49d66b0a3e50305bddec544ee315",
"pubkey": "d4a7cb8349c187924eab95829a4350e8f9463cf1db8912ef6149c9612c7f7dc7",
"created_at": 1693536481,
"kind": 1,
"tags": [
[
"p",
"0975755f9b4d6c112b8d54acb430970823804648bf26be44fd0d092d76108a1f",
"wss://relay.mostr.pub"
],
[
"p",
"c8e736cdfdc3a65bf80075ac7dd1d317918a302f80199e36fc82e76745197f19",
"wss://relay.mostr.pub"
],
[
"p",
"1242b9559b06c482171cfe548589042e566763dafd969076c2c9887824c1b59e",
"wss://relay.mostr.pub"
],
[
"p",
"8b30d2de56508924172938b5c125c027f7ba0c682b7ab34dc39d5e0a9a9a12b6",
"wss://relay.mostr.pub"
],
[
"t",
"infosec"
],
[
"t",
"linux"
],
[
"t",
"selfhosting"
],
[
"proxy",
"https://fosstodon.org/users/genebean/statuses/110987606845392364",
"activitypub"
]
],
"content": "Hey #infosec peeps: how would you suggest tracking who ssh’s to various #Linux servers? I’m looking to keep an audit trail of who was logged in when. I’d also like to be able to produce some kind of dashboard of systems with active ssh sessions and who is connected to each one. These can be separated systems but do need to support #SelfHosting. \n\nnostr:npub1p96h2humf4kpz2ud2jktgvyhpq3cq3jghuntu38ap5yj6ass3g0s5373f4 \u0026 nostr:npub1ernndn0acwn9h7qqwkk8m5wnz7gc5vp0sqveudhustnkw3ge0uvs3n75le - tagging you in hopes you’ve previously solved this",
"sig": "5efbf3cccf7f3bb662ac6182e4761e51c3a828eb2d4185e1c04a60bf967b458244381ea1ac5f33fa7ebc480cf7c14367fc29173f36297e891f00063ca0a76482"
}