mirror of
https://github.com/kernelkit/infix.git
synced 2026-08-06 23:43:20 +02:00
Joachim Wiberg
dac2182069
This commit introduces a new SECURITY() log macro that logs to facility 'audit' (sometimes called 'security') with severity set to 'alert'. It is then used to instrument the single most important things to log; all changes to users and their privileges. We also add logging to sysrepo, which knows the username for changes to running-config, copies to startup-config, and RPCs. Fixes #521 Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
34 lines
1.2 KiB
Plaintext
34 lines
1.2 KiB
Plaintext
#set DEBUG=1
|
|
|
|
run name:bootstrap log:prio:user.notice norestart <usr/ixinit-done> \
|
|
[S] /usr/libexec/confd/bootstrap \
|
|
-- Bootstrapping YANG datastore
|
|
|
|
run name:error :1 log:console norestart if:<run/bootstrap/failure> \
|
|
[S] /usr/libexec/confd/error --
|
|
|
|
service name:confd log:prio:daemon.err <run/bootstrap/success> \
|
|
[S12345] sysrepo-plugind -f -p /run/confd.pid -n -v warning \
|
|
-- Configuration daemon
|
|
|
|
# Bootstrap system with startup-config
|
|
run name:startup log:prio:user.notice norestart <pid/confd> \
|
|
[S] /usr/libexec/confd/load startup-config \
|
|
-- Loading startup-config
|
|
|
|
# Run if loading startup-config fails for some reason
|
|
run name:failure log:prio:user.critical norestart <pid/confd> if:<run/startup/failure> \
|
|
[S] /usr/libexec/confd/load failure-config \
|
|
-- Loading failure-config
|
|
|
|
run name:error :2 log:console norestart if:<run/failure/failure> \
|
|
[S] /usr/libexec/confd/error --
|
|
|
|
service name:netopeer notify:none log <pid/confd> \
|
|
[12345] netopeer2-server -F -t 60 -v 1 \
|
|
-- NETCONF server
|
|
|
|
# Create initial /etc/resolv.conf after successful bootstrap
|
|
task name:resolv :conf norestart <pid/dnsmasq> if:<run/startup/success> \
|
|
[S] resolvconf -u -- Update DNS configuration
|