From 24a10d19a90e7c8b3b21c5354929918dbdfb45e9 Mon Sep 17 00:00:00 2001
From: Jannik Beyerstedt <code@jannikbeyerstedt.de>
Date: Sun, 8 Mar 2020 16:52:50 +0100
Subject: [PATCH] [CODE] update sshd config (fixes #5)

---
 files/sshd_config | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/files/sshd_config b/files/sshd_config
index 0073db7..7924381 100644
--- a/files/sshd_config
+++ b/files/sshd_config
@@ -44,7 +44,6 @@ PrintMotd no
 #PrintLastLog yes
 #TCPKeepAlive yes
 #UseLogin no
-#UsePrivilegeSeparation sandbox
 #PermitUserEnvironment no
 #Compression delayed
 #ClientAliveInterval 0
@@ -59,8 +58,8 @@ UseDNS no
 # Allow client to pass locale environment variables
 AcceptEnv LANG LC_*
 
-# override default of no subsystems
-Subsystem	sftp	/usr/lib/openssh/sftp-server
+# Log sftp level file access (read/write/etc.) that would not be easily logged otherwise.
+Subsystem sftp  /usr/lib/openssh/sftp-server -f AUTHPRIV -l INFO
 
 # Example of overriding settings on a per-user basis
 #Match User anoncvs