Package: gatling
Version: 0.13-5+b3
Severity: normal

Dear Maintainer,

there's no way to disable logging of IP addresses in gatling itself as
all the logging is hard-coded. As logging is done to a custom log file
rather than via syslog, filtering via the syslog daemon isn't possible
either. The only way to add a post-processing filter is by hacking the
init script or disabling the init script and using a custom setup
(e.g. a hand-crafted systemd unit file). So disabling logging of IP
addresses for gatling on a given system requires a considerable amount
of work.

>From a technical point of view, this is fine. Logging of IP addresses
is very useful for debugging. From a legal point view, it's
problematic at best for public facing servers in at least Germany and
often advised against by lawyers and data protection officials (see
e.g. [1]). To be on the safe side (and to be privacy friendly),
administrators may want to disable logging of IP addresses entirely
(like libapache2-mod-removeip does for Apache) or put them through a
custom filter (that might e.g. filter out all IP addresses that are
not on an explicit white list containing company-internal IP
addresses).

Sascha

[1] https://www.datenschutzzentrum.de/ip-adressen/index.html

-- System Information:
Debian Release: 8.7
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates'), (100, 'testing'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.0-0.bpo.2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Reply via email to