Ability to assign audit file permissions based on mongod's user group (not user)

XMLWordPrintableJSON

    • Type: New Feature
    • Resolution: Fixed
    • Priority: Major - P3
    • 4.3.1
    • Affects Version/s: None
    • Component/s: Logging
    • None
    • Fully Compatible
    • Security 2019-07-01, Security 2019-07-15, Security 2019-07-29, Security 2019-08-26
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Current audit configuration: 

      auditLog: 
          destination: file 
          format: JSON 
          path: /data/mongodb/audit/mongo_audit.log 

      Files are rotated using SIGUSR1 to the mongod's PID. 

      When using the audit feature, we want the audit file to have r/w permissions for the mongod group and not only the mongod user itself.

      Nowadays we are using the flag  honorSystemUmask:true , but we want to eliminate it for not all the users on the machine will have access to it

        1. Capture.PNG
          7 kB
          barak gilboa

            Assignee:
            Sara Golemon (Inactive)
            Reporter:
            barak gilboa
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: