Rule History

[jw3]

Create an on-disk journal to track rule change history.

Goals

• Help resolve the config drift between rulesets and the logs that reference them, ie debugging an issue in week old logs while the ruleset has been updated since then.
• Provide a set of restore points to address that case where a previous set of rules just worked better.

Storing backups as flat files would be zero dependency, however sled might also be an interesting backend choice.

edit: Sled does not have a Fedora package

• https://sled.rs
• https://github.com/spacejam/sled

[jw3]

Building blocks in fapolicyd

• https://github.com/linux-application-whitelisting/fapolicyd/issues/278
• https://github.com/linux-application-whitelisting/fapolicyd/pull/279