Menu

#2970 imm: missing log level when syslogs security violation message

5.21.06
fixed
None
defect
imm
nd
major
False
2021-04-07
2018-11-22
No

Following messages are broadcasted to all consoles when access control mode is enabled.

Broadcast message from systemd-journald@SC-2 (xxx.xxx CET):
osafimmnd[3445]: access violation by xxx(uid=333)

That happens because IMMND alerts security violation without passing syslog level to syslog, so the level is assigned to LOG_EMERG in default.

We should pass LOG_ALERT level together with LOG_AUTH facility to syslog.

Related

Wiki: ChangeLog-5.21.06

Discussion

  • Gary Lee

    Gary Lee - 2019-01-09
    • Milestone: 5.19.01 --> 5.19.03
     
  • Gary Lee

    Gary Lee - 2019-03-26
    • Milestone: 5.19.03 --> 5.19.06
     
  • Gary Lee

    Gary Lee - 2019-07-23
    • Milestone: 5.19.07 --> 5.19.10
     
  • Gary Lee

    Gary Lee - 2019-10-21
    • Milestone: 5.19.10 --> 5.20.01
     
  • Gary Lee

    Gary Lee - 2020-02-15
    • Milestone: 5.20.02 --> 5.20.05
     
  • Gary Lee

    Gary Lee - 2020-05-30
    • Milestone: 5.20.05 --> 5.20.08
     
  • Gary Lee

    Gary Lee - 2020-08-31
    • Milestone: 5.20.08 --> 5.20.11
     
  • Gary Lee

    Gary Lee - 2020-12-01
    • Milestone: 5.20.11 --> 5.21.03
     
  • Gary Lee

    Gary Lee - 2021-03-01
    • Milestone: 5.21.03 --> 5.21.06
     
  • Minh Hon Chau

    Minh Hon Chau - 2021-03-14
    • status: assigned --> unassigned
     
  • Surbhi Tripathi

    Surbhi Tripathi - 2021-03-15
    • status: unassigned --> assigned
    • assigned_to: Vu Minh Nguyen --> Surbhi Tripathi
     
  • Surbhi Tripathi

    Surbhi Tripathi - 2021-03-23
    • status: assigned --> review
     
  • Surbhi Tripathi

    Surbhi Tripathi - 2021-04-07

    Author: ztrisur Surbhi.tripathi@dektech.com.au
    Date: Tue Mar 23 15:27:30 2021 +1100

    imm: Fix log level in syslogs security violation message [#2970]
    
    Passed syslog severity level "LOG_ALERT" with "LOG_AUTH" facility
    
     
  • Surbhi Tripathi

    Surbhi Tripathi - 2021-04-07
    • status: review --> fixed
     

Log in to post a comment.