[MDEV-5313] Improving audit api Created: 2013-11-19  Updated: 2023-04-24

Status: Stalled
Project: MariaDB Server
Component/s: Plugin - Audit, Plugins
Fix Version/s: None

Type: Task Priority: Major
Reporter: Sergei Golubchik Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: None

Issue Links:
Blocks
blocks MDEV-5983 Auditing plugin v2.0 Closed
blocks MDEV-7389 Request: log warnings into SQL_ERROR_LOG Closed
blocks MDEV-12182 RFE: audit plugin should log HOST:POR... Open
Relates
relates to MDEV-5212 Role support for Audit Plugin API Open
relates to MDEV-10299 Make server_audit plugin support roles Open
relates to MDEV-12494 Include or exclude host names from au... Closed
relates to MDEV-14713 MariaDB Audit Plugin audits SET GLOBAL Open
relates to MDEV-19442 server_audit plugin doesn't consider ... Closed
relates to MDEV-19443 server_audit plugin doesn't log proxy... Closed
relates to MDEV-19458 server_audit plugin should log when t... Open
relates to MDEV-5216 5.5.34 merge Closed
relates to MDEV-5652 5.5.36 merge Closed
Sprint: 5.5.48-0, 10.0.24, 10.2.0-6, 10.2.0-7, 5.5.50, 10.2.2-1, 10.2.2-2, 10.2.2-3, 10.2.2-4

 Description   

A lot of desired features of the audit plugin are stalled as the current API doesn't provide necessary capabilities.
The list of desired ones:

  • plugin data can be stored in the server table.
  • information about user's role
  • information about the tables/databases involved with the query
  • possible parser result of the query
  • export JSON functions
  • access to the information about the connection
    encryption used
    authentication method
    connection type
    connector used

I don't think there is any reason to extend the structures that are sent to the auditing
fucntions. The way to go is creating server functions that can be linken in the plugin - irectly or via the 'service'-s.



 Comments   
Comment by Alexey Botchkov [ 2016-10-23 ]

Patch proposal:
http://lists.askmonty.org/pipermail/commits/2016-February/009025.html

Comment by Alexey Botchkov [ 2018-12-02 ]

http://lists.askmonty.org/pipermail/commits/2018-December/013177.html

I didn't include method implementations in this patch - to focus on the interface.

Comment by Alexey Botchkov [ 2018-12-12 ]

http://lists.askmonty.org/pipermail/commits/2018-December/013197.html

Comment by Alexey Botchkov [ 2019-01-19 ]

http://lists.askmonty.org/pipermail/commits/2019-January/013298.html

Generated at Thu Feb 08 07:03:20 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.