[Pki-devel] [PATCH] 0002 Trac Ticket #884 TPS Rewrite: Audit and other Logging

Christina Fu cfu at redhat.com
Thu Apr 10 17:04:37 UTC 2014


Attached please find the patch for Trac Ticket #884
https://fedorahosted.org/pki/ticket/884

This TPS Rewrite patch focuses on making Auditing and other Logging 
available.
The Java Logging framework is actually readily available.  The gist of 
the work for this ticket was mostly mapping the old TPS audit events 
defined in audit.h to where the java ones are defined: 
LogMessages.properties, as well as making sure the audit signing 
signatures are legit.

The link to the mapping, as provided in the ticket is : 
http://pki.fedoraproject.org/wiki/TPS_Rewrite#Audit_Messages
TPS rewrite authors are to consult the wiki page to find the right audit 
message formatter to use while doing the rewrite work.
The mapping or detail of each audit message and format could change per 
CC review at a later time.

Example usage can also be found in the ticket.

In my developer's environment setup, I was able to generate signed audit 
messages and run AuditVerify to verify the signatures.

What is NOT covered:
* cloning consideration
* convenience routines to simplify the calls for auditing (this can be 
written when we have a clear picture of whether some information can be 
conveniently retrieved at a central location: e.g. perhaps some kind of 
"session" within the current running thread)
* actual auditing calls (to be made by individual TPS rewrite authors 
where appropriate)

review comments welcome.
Christina

-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-cfu-0003-Trac-ticket-884-TPS-Rewrite-Audit-and-other-Logging.patch
Type: text/x-patch
Size: 10575 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20140410/e0f67c4e/attachment.bin>


More information about the Pki-devel mailing list