Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add UID to filesystem modification events #27

Open
dansondergaard opened this issue Nov 21, 2024 · 0 comments
Open

Add UID to filesystem modification events #27

dansondergaard opened this issue Nov 21, 2024 · 0 comments
Labels
enhancement New feature or request new Issues that haven't been triaged yet

Comments

@dansondergaard
Copy link

Is your feature request related to a problem? Please describe.

We would like to use filesystem modification events for audit logging on our BeeGFS storage, but without a UID in the events, this is not possible.

Describe the solution you'd like

Add the UID of the user carrying out the operation to the filesystem modification events. Since this is just adding a field to the JSON, it's backwards-compatible. The UID seems to be included in all NetMessage messages to the metadata server, so the information is readily available with getMsgHeaderUserID().

It seems that there's only 10 locations in the code where an operation is logged, for example:

Describe alternatives you've considered

Running auditd on each compute node and collecting logs. However, it's not as reliable or flexible as an approach based on filesystem modification events.

Additional context

None.

@dansondergaard dansondergaard added enhancement New feature or request new Issues that haven't been triaged yet labels Nov 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request new Issues that haven't been triaged yet
Projects
None yet
Development

No branches or pull requests

1 participant