Skip to content
cardoppler edited this page Jun 22, 2013 · 4 revisions

Module for creating and reading audit logs.

The log collects the events happening in the system, such as data flows in/out, users' app authorization, ...

HMAC chains and evolving keys are used to provide "forward-integrity". Permissions are checked using django.auth. Settings comes from service_config.py file. The backend is mongoDB. Each user has his own log trail which corresponds to a collection. A table stores <user,key> pairs.

In its current state, logger append-only functions needs to be called by other classes passing the event to store as input. A checker method allows the user to verify the integrity of his own audit trail.

[More to come]

Clone this wiki locally