openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #12921
Re: secure logging in OpenStack
On 06/07/2012 10:08 AM, Thierry Carrez wrote:
> Paolo Smiraglia wrote:
>> I wrote a library that implement some security features for logging. In
>> a few words, the library generates a log files where all log entries are
>> linked through an hash chain. In this way it's possible to verify the
>> integrity of the log files. Now, I would to integrate functionalities
>> provided by my library in the OpenStack logging system.
>>
>> From a rapid view of python logging module, I saw that its possible to
>> define custom logging handlers. My idea is to define a new handler as follow
>>
>> class SecureLogHandler(logging.Handler)
>>
>> and to include it in the log module of OpenStack.
>>
>> Is this a good approach?
>
> Making it optional (keeping the ability to run the old one) could be a plus.
Sure, I had already planned to make this new handler optional (using a
flag to enable/disable it).
>> There are some directives that I must follow (code styling, method
>> definition, ...)?
>
> Code style is defined in http://wiki.openstack.org/CodingStandards and
> in the HACKING.rst file in project repositories.
>
> Generally speaking, you should read
> http://wiki.openstack.org/HowToContribute as a starting point, and get
> familiar with our development cycle at
> http://wiki.openstack.org/ReleaseCycle. You should probably create a
> blueprint (see http://wiki.openstack.org/Blueprints) so that we can
> properly track this feature.
>
> Cheers!
>
Many thanks for the tips! :-)
Bests...
--
PAOLO SMIRAGLIA
Department of Control and Computer Engineering
Polytechnic University of Turin
Email: paolo.smiraglia@xxxxxxxxx
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
References