Skip to content
This repository has been archived by the owner on Feb 5, 2025. It is now read-only.

Santa should have a way to limit what's logged in santa.log #1375

Open
pmarkowsky opened this issue Jun 27, 2024 · 1 comment
Open

Santa should have a way to limit what's logged in santa.log #1375

pmarkowsky opened this issue Jun 27, 2024 · 1 comment

Comments

@pmarkowsky
Copy link
Contributor

It would be nice to have a filter that allows you to decide which events are / are not logged into the logs in /var/db/santa/.

I propose but am not wedded to the following:

  • Assign each event a number
  • Create a bitmask where all ones means all events
  • Check the bitmask and only log the events that are enabled in the bitmask.
  • Create a new option in the config LogFilter that by default logs all events.
  • Create a string mapping of fields to be set in the option similar to the USB options.
@mlw
Copy link
Contributor

mlw commented Jun 27, 2024

Further, when events that are configured to be filtered are not needed for other purposes (e.g. cache invalidation, transitive allowlisting, etc.) then the associated subscriptions should also be removed.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants