#4128 Enable exclusions in the sssd-session-recording configuration
Closed: cloned-to-github 3 years ago by pbrezina. Opened 4 years ago by andreasdavour.

When configuring the scope of whom to log, the sssd-session-recording configuration file only allow none/all/some, and there is no way to configure "all, but".

In my case I would like to have the scope "all" but exclude the user running ansible, puppet and other such recurring jobs, as what I want to log is deviations, not my usual controlled management access.

Something like:
[session_recording]
scope = all,!ansible

Could this be an option, please?

referred here by from: https://github.com/Scribery/tlog/issues/273


Metadata Update from @jstephen:
- Issue assigned to jstephen

4 years ago

This makes perfect sense. @thalman please, include this in next triage.

Metadata Update from @thalman:
- Issue tagged with: Next milestone

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5089

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @pbrezina:
- Issue close_status updated to: cloned-to-github
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata