Project

General

Profile

Actions

Bug #23451

open

Global mode on audit, node is not enforcing mode, but directive set to Enforce, results in bad policy mode

Added by Nicolas CHARLES 8 months ago. Updated 14 days ago.

Status:
New
Priority:
N/A
Category:
Techniques
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

It breaks on the relay, server and node the policy mode is not valid

global audit

and with an enforced directive

(note: the bad policy mode is only if we have a global audit, a local audit will result in audit)


Files

Updated by Nicolas CHARLES 8 months ago

Actions #3

Updated by Nicolas CHARLES 8 months ago

  • Subject changed from We can set the mode to "Audit" for the rudder root server and relay to We can set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode
  • Description updated (diff)
Actions #4

Updated by Raphael GAUTHIER 8 months ago

  • Status changed from New to In progress
  • Assignee set to Raphael GAUTHIER
Actions #5

Updated by Nicolas CHARLES 8 months ago

  • Subject changed from We can set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode to When we set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode
Actions #6

Updated by Nicolas CHARLES 8 months ago

  • Subject changed from When we set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode to When we set the mode to "Audit" on a node/server, it results in bad policy mode
  • Description updated (diff)
Actions #7

Updated by Raphael GAUTHIER 7 months ago

  • Status changed from In progress to New
Actions #8

Updated by Vincent MEMBRÉ 7 months ago

  • Subject changed from When we set the mode to "Audit" on a node/server, it results in bad policy mode to Global mode on audit, node is not enforcing mode, but directive set to Enforce, results in bad policy mode
  • Target version changed from 8.0.0~beta3 to 7.3.8

I reproduced this on 7.3 too

Actions #9

Updated by Vincent MEMBRÉ 6 months ago

  • Target version changed from 7.3.8 to 7.3.9
Actions #10

Updated by Vincent MEMBRÉ 6 months ago

  • Target version changed from 7.3.9 to 7.3.10
Actions #11

Updated by Vincent MEMBRÉ 5 months ago

  • Target version changed from 7.3.10 to 7.3.11
Actions #12

Updated by François ARMAND 4 months ago

  • Assignee changed from Raphael GAUTHIER to Clark ANDRIANASOLO
Actions #13

Updated by Clark ANDRIANASOLO 4 months ago

  • Category changed from Web - Config management to Techniques
  • Assignee changed from Clark ANDRIANASOLO to Alexis Mousset

In the end it looks like the agent should not be generating 'audit' reports in the example, but rather 'enforce' ones, and the directive policy mode 'enforce' is the correct value for the report.

It seems the fix should be in the technique hooks : https://rudderio.slack.com/archives/C3X0V8ZL6/p1705592861427499?thread_ts=1705586514.068269&cid=C3X0V8ZL6.

Actions #14

Updated by Vincent MEMBRÉ 3 months ago

  • Target version changed from 7.3.11 to 7.3.12
Actions #15

Updated by Vincent MEMBRÉ 2 months ago

  • Target version changed from 7.3.12 to 7.3.13
Actions #16

Updated by Vincent MEMBRÉ about 2 months ago

  • Target version changed from 7.3.13 to 7.3.14
Actions #17

Updated by Vincent MEMBRÉ 14 days ago

  • Target version changed from 7.3.14 to 7.3.15
Actions

Also available in: Atom PDF