In senhasegura, all commands in a session are audited until a device change occurs during that session. If a user switches from device X to device Y using, for example, an SSH command, senhasegura stops auditing subsequent commands. This is because the audit is linked to the initial shell of device X, and does not continue to device Y after the change.
Security Considerations:
- The loss of auditing after changing devices represents an important limitation, since commands on the new device will not be monitored by senhasegura.
Recommendation:
- Users should start new sessions in senhasegura each time they access a new device, to ensure that all commands are audited correctly.