[Pki-devel] [PATCH] 0002 Trac Ticket #884 TPS Rewrite: Audit and other Logging

Christina Fu cfu at redhat.com
Fri Apr 11 22:35:30 UTC 2014


Received ACK's from both edewata and jmagne.

Pushed to master.

thanks,
Christina


On 04/10/2014 10:04 AM, Christina Fu wrote:
> Attached please find the patch for Trac Ticket #884
> https://fedorahosted.org/pki/ticket/884
>
> This TPS Rewrite patch focuses on making Auditing and other Logging 
> available.
> The Java Logging framework is actually readily available.  The gist of 
> the work for this ticket was mostly mapping the old TPS audit events 
> defined in audit.h to where the java ones are defined: 
> LogMessages.properties, as well as making sure the audit signing 
> signatures are legit.
>
> The link to the mapping, as provided in the ticket is : 
> http://pki.fedoraproject.org/wiki/TPS_Rewrite#Audit_Messages
> TPS rewrite authors are to consult the wiki page to find the right 
> audit message formatter to use while doing the rewrite work.
> The mapping or detail of each audit message and format could change 
> per CC review at a later time.
>
> Example usage can also be found in the ticket.
>
> In my developer's environment setup, I was able to generate signed 
> audit messages and run AuditVerify to verify the signatures.
>
> What is NOT covered:
> * cloning consideration
> * convenience routines to simplify the calls for auditing (this can be 
> written when we have a clear picture of whether some information can 
> be conveniently retrieved at a central location: e.g. perhaps some 
> kind of "session" within the current running thread)
> * actual auditing calls (to be made by individual TPS rewrite authors 
> where appropriate)
>
> review comments welcome.
> Christina
>
>
>
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20140411/6b5f8e56/attachment.htm>


More information about the Pki-devel mailing list