Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-31082

Add variable to filter out CONNECT events in Audit Plugin

Details

    Description

      Please add variable to filter out CONNECT events in Audit Plugin. Normally, we have filters for users like server_audit_excl_users and server_audit_incl_users. But CONNECT records aren't affected by these variables - they are always logged. So if the same user is specified both in incl_ and excl_ lists, they will still be logged and there is no variable where I can specify if I don't want to capture CONNECT events for specific users.

      Attachments

        Activity

          ralf.gebhardt Ralf Gebhardt added a comment -

          This is the documented behavior, see https://mariadb.com/kb/en/mariadb-audit-plugin-log-settings/#excluding-or-including-users

          "Note that CONNECT events are always logged for all users, regardless of these two settings. Logging is also based on username only, not the username and hostname combination that MariaDB uses to determine privileges."

          See also https://mariadb.com/docs/server/security/audit/enterprise-audit/, where CONNECTs can be logged per user

          ralf.gebhardt Ralf Gebhardt added a comment - This is the documented behavior, see https://mariadb.com/kb/en/mariadb-audit-plugin-log-settings/#excluding-or-including-users "Note that CONNECT events are always logged for all users, regardless of these two settings. Logging is also based on username only, not the username and hostname combination that MariaDB uses to determine privileges." See also https://mariadb.com/docs/server/security/audit/enterprise-audit/ , where CONNECTs can be logged per user

          People

            Unassigned Unassigned
            niljoshi Nilnandan Joshi
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.