infix icon indicating copy to clipboard operation
infix copied to clipboard
verified publisher icon kernelkit

confd: audit trail

Open troglobit opened this issue 1 year ago • 1 comments

Log to syslog when the configuration is changed and by whom.

  • local change in CLI
  • via NETCONF
  • via RESTCONF

Should be the same for all three, but remember to verify or design it that way.

Follow progress here: https://github.com/kernelkit/infix/pull/544#issuecomment-2242635134

troglobit avatar Jul 02 '24 13:07 troglobit

Limited success with existing APIs, needs rethink possibly. Asked question upstream https://github.com/sysrepo/sysrepo/issues/3391

troglobit avatar Aug 12 '24 09:08 troglobit

Reminder to self:

  • Need to add logging in sysrepo, see upstream issue, or
  • Push NACM user identity to shm so callbacks can map the user/uid to a change/request-id

If change is made in sysrepo, ensure frontends (netopeer, rousette, klishd) activate logging to syslog, or stderr.

troglobit avatar Aug 19 '24 15:08 troglobit