Actions
Bug #13175
closedrudder agent log files content in user facility
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
Fix check:
Regression:
Description
Information about environement:
- OS: Debian 9.5 and 8.11
- syslog-ng version: 3.8 and 3.5
- Rudder agent version: 4.3.3
When a « File content » directive run on a node, file content is logged in syslog-ng.
For example (syslog-ng trace) :
Aug 8 10:49:06 hostname syslog-ng[2552]: Incoming log entry; line='dummy line in a configuration file' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation begins; rule='f_syslog3', location='/etc/syslog-ng/syslog-ng.conf:131:19' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='facility' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='level' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='AND' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='filter(f_debug)' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='AND' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation result; result='match', rule='f_syslog3', location='/etc/syslog-ng/syslog-ng.conf:131:19' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation begins; rule='f_user', location='/etc/syslog-ng/syslog-ng.conf:132:16' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='facility' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='level' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='not-match', type='AND' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='filter(f_debug)' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='AND' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation result; result='match', rule='f_user', location='/etc/syslog-ng/syslog-ng.conf:132:16' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation begins; rule='f_messages', location='/etc/syslog-ng/syslog-ng.conf:119:20' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='level' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='facility' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter node evaluation result; result='match', type='AND' Aug 8 10:49:06 hostame syslog-ng[2552]: Filter rule evaluation result; result='match', rule='f_messages', location='/etc/syslog-ng/syslog-ng.conf:119:20'
At the moment we have created a syslog-ng rule to redirect every lines coming from user facility to /dev/null but is not convenient because some applications use this facility too.
If you need our syslog-ng configuration tell us.
Updated by Benoît PECCATTE almost 6 years ago
- Related to Bug #13608: file enforce content log file content which can have private info added
Updated by Benoît PECCATTE almost 6 years ago
- Tracker changed from Question to Bug
- Priority set to 0
Updated by Nicolas CHARLES almost 6 years ago
- Project changed from Rudder to 41
- Category deleted (
Agent) - Target version set to 4.3.5
Updated by Nicolas CHARLES almost 6 years ago
- Category set to Generic methods
Fixing the reporting for the branch 4.3 here
Updated by Nicolas CHARLES almost 6 years ago
- Status changed from New to In progress
- Assignee set to Nicolas CHARLES
Updated by Nicolas CHARLES almost 6 years ago
- Status changed from In progress to Pending technical review
- Assignee changed from Nicolas CHARLES to Alexis Mousset
- Pull Request set to https://github.com/Normation/ncf/pull/839
Updated by Nicolas CHARLES almost 6 years ago
- Status changed from Pending technical review to Pending release
Applied in changeset commit:bfee24d4da4f44eb37b0090aebed9ddfdc89a205.
Updated by Vincent MEMBRÉ almost 6 years ago
- Status changed from Pending release to Released
Updated by Alexis Mousset about 2 years ago
- Project changed from 41 to Rudder
- Category changed from Generic methods to Generic methods
Actions