Project

General

Profile

Actions
Copy link

Bug #23451

closed

Global mode on audit, node is not enforcing mode, but directive set to Enforce, results in bad policy mode

Added by Nicolas CHARLES about 1 year ago. Updated 4 months ago.

Status:
Rejected
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Techniques
Target version:
7.3.17
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

It breaks on the relay, server and node the policy mode is not valid

global audit

and with an enforced directive

(note: the bad policy mode is only if we have a global audit, a local audit will result in audit)

Files

Download all files
clipboard-202309191429-y6zbs.png (53.3 KB) clipboard-202309191429-y6zbs.png Nicolas CHARLES, 2023-09-19 14:29
clipboard-202309191432-bthsw.png (125 KB) clipboard-202309191432-bthsw.png Nicolas CHARLES, 2023-09-19 14:32
clipboard-202309191432-o0yoy.png (119 KB) clipboard-202309191432-o0yoy.png Nicolas CHARLES, 2023-09-19 14:32
Actions
Copy link Download all files
 #2

Updated by Nicolas CHARLES about 1 year ago

Actions
Copy link
 #3

Updated by Nicolas CHARLES about 1 year ago

  • Subject changed from We can set the mode to "Audit" for the rudder root server and relay to We can set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode
  • Description updated (diff)
Actions
Copy link
 #4

Updated by Raphael GAUTHIER about 1 year ago

  • Status changed from New to In progress
  • Assignee set to Raphael GAUTHIER
Actions
Copy link
 #5

Updated by Nicolas CHARLES about 1 year ago

  • Subject changed from We can set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode to When we set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode
Actions
Copy link
 #6

Updated by Nicolas CHARLES about 1 year ago

  • Subject changed from When we set the mode to "Audit" for the rudder root server and relay, resulting in bad policy mode to When we set the mode to "Audit" on a node/server, it results in bad policy mode
  • Description updated (diff)
Actions
Copy link
 #7

Updated by Raphael GAUTHIER about 1 year ago

  • Status changed from In progress to New
Actions
Copy link
 #8

Updated by Vincent MEMBRÉ about 1 year ago

  • Subject changed from When we set the mode to "Audit" on a node/server, it results in bad policy mode to Global mode on audit, node is not enforcing mode, but directive set to Enforce, results in bad policy mode
  • Target version changed from 8.0.0~beta3 to 7.3.8

I reproduced this on 7.3 too

Actions
Copy link
 #9

Updated by Vincent MEMBRÉ about 1 year ago

  • Target version changed from 7.3.8 to 7.3.9
Actions
Copy link
 #10

Updated by Vincent MEMBRÉ about 1 year ago

  • Target version changed from 7.3.9 to 7.3.10
Actions
Copy link
 #11

Updated by Vincent MEMBRÉ 12 months ago

  • Target version changed from 7.3.10 to 7.3.11
Actions
Copy link
 #12

Updated by François ARMAND 10 months ago

  • Assignee changed from Raphael GAUTHIER to Clark ANDRIANASOLO
Actions
Copy link
 #13

Updated by Clark ANDRIANASOLO 10 months ago

  • Category changed from Web - Config management to Techniques
  • Assignee changed from Clark ANDRIANASOLO to Alexis Mousset

In the end it looks like the agent should not be generating 'audit' reports in the example, but rather 'enforce' ones, and the directive policy mode 'enforce' is the correct value for the report.

It seems the fix should be in the technique hooks : https://rudderio.slack.com/archives/C3X0V8ZL6/p1705592861427499?thread_ts=1705586514.068269&cid=C3X0V8ZL6.

Actions
Copy link
 #14

Updated by Vincent MEMBRÉ 10 months ago

  • Target version changed from 7.3.11 to 7.3.12
Actions
Copy link
 #15

Updated by Vincent MEMBRÉ 9 months ago

  • Target version changed from 7.3.12 to 7.3.13
Actions
Copy link
 #16

Updated by Vincent MEMBRÉ 9 months ago

  • Target version changed from 7.3.13 to 7.3.14
Actions
Copy link
 #17

Updated by Vincent MEMBRÉ 7 months ago

  • Target version changed from 7.3.14 to 7.3.15
Actions
Copy link
 #18

Updated by Vincent MEMBRÉ 6 months ago

  • Target version changed from 7.3.15 to 7.3.16
Actions
Copy link
 #19

Updated by Vincent MEMBRÉ 5 months ago

  • Target version changed from 7.3.16 to 7.3.17
Actions
Copy link
 #20

Updated by Alexis Mousset 4 months ago

  • Status changed from New to In progress
Actions
Copy link
 #21

Updated by Alexis Mousset 4 months ago

Could not reproduce in 8.1, it is likely that the changes made for policy mode override solved the problem. The policy mode in the reports looks correct in respect to the configuration. Closing.

Actions
Copy link
 #22

Updated by Alexis Mousset 4 months ago

  • Status changed from In progress to Rejected

Please reopen if reproducible in 8.1+.

Actions
Copy link

Also available in: Atom PDF