Esben Stien executiv@online.no writes:
I kind of figured this as an option for lshd, not the client.
It would help if you spelled out precisely what it is you want; it's hard to guess that "log a entire lsh session" means a server-side configuration for lshd to log everybody's incoming ssh sessions.
Do you want all sessions, or just sessions that have a terminal and can be considered interactive? Logging rsync or sftp over lsh may not be a good idea.
I'm afraid there's no such flag in current lshd. The FascistLogging option of ssh1 is the closest thing I've heard of, but I've never tried it so I don't know exactly what it logs.
You may be able to do what you want by using a custom login shell, but it's probably not trivial to get it to work reliably and securely.
It would be a nice feature though. Don't you think?
No, I don't think so. You may be able to change my mind by providing a reasonable usage scenario where the option really is useful.
Regards, /Niels