[
https://issues.apache.org/jira/browse/HDDS-12704?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Attila Doroszlai resolved HDDS-12704.
-------------------------------------
Fix Version/s: 2.1.0
Resolution: Fixed
> Ensure SCM access logged to audit
> ---------------------------------
>
> Key: HDDS-12704
> URL: https://issues.apache.org/jira/browse/HDDS-12704
> Project: Apache Ozone
> Issue Type: Bug
> Components: SCM
> Reporter: Attila Doroszlai
> Assignee: Priyesh K
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.1.0
>
>
> SCMClientProtocolServer has different behavior for various operations:
> - operation not audited at all (examples: decommissionNodes,
> recommissionNodes)
> - operation audited, but admin access failure not logged, because it is
> checked outside of try-catch block (examples: allocateContainer,
> getContainer, closeContainer)
> - operation audited, including admin access failure (examples:
> deleteContainer, activatePipeline)
> closeContainer checks admin access twice.
> All operations (defined in {{StorageContainerLocationProtocol}}) should have
> audit log.
> Admin operations should check privilege in the try block to ensure failure is
> audited in catch block.
> Exceptions that are caught and logged to audit should not be also output with
> stack trace to the regular log. (Example: recommissionNodes)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
