#4128 Enable exclusions in the sssd-session-recording configuration
Opened 2 months ago by andreasdavour. Modified 2 months ago

When configuring the scope of whom to log, the sssd-session-recording configuration file only allow none/all/some, and there is no way to configure "all, but".

In my case I would like to have the scope "all" but exclude the user running ansible, puppet and other such recurring jobs, as what I want to log is deviations, not my usual controlled management access.

Something like:
scope = all,!ansible

Could this be an option, please?

referred here by from: https://github.com/Scribery/tlog/issues/273

Metadata Update from @jstephen:
- Issue assigned to jstephen

2 months ago

This makes perfect sense. @thalman please, include this in next triage.

Login to comment on this ticket.