fetzerms / cryptboot-ssh

Retrieve cryptsetup keyfiles via ssh automatically at boot.
GNU General Public License v2.0
18 stars 9 forks source link

Add logging hooks #18

Open fetzerms opened 5 years ago

fetzerms commented 5 years ago

As a system administrator, I want to see when and who retrieves cryptkeys from the cryptserver. As the logging facilities differ much from system to system and from administrator to administrator, a general way of adding logging hooks should be installed.

AC:

fetzerms commented 5 years ago

@459below do you think this approach will be ok? I'm unsure about the parameters (and the general approach).

459below commented 5 years ago

If I understand this right, we want to have the capability to log to something simple as syslog, but also keep compatibility to embedded Linux systems like Android, yes?

I see how this approach would solve this problem. One could even implement some sort of notification mechanisms as a hook, if they choose to.

This is how output on SimpleSSHD would already show up on the phone.

screenshot_20180803-150642

fetzerms commented 5 years ago

Yes, this is the general idea. I was planning to implement some notifications to irc as well as mail notifications for key retrievals. Using a hook for syslog would be the most basic example.