Skip to content

WIP: Add file system access logger

Alessio Caiazza requested to merge ac-log-disk-access into master

What does this MR do?

This is an alternative approch to gitlab-org/gitlab-ce#53294

It's simpler than gitlab-org/gitlab-ce!22663

It logs only File.new invocation with mode and other parameters. Only write/append operations are errors, everything else is logged as info level.

It's disabled by default in production, but can be enabled with an ENV variable

Screenshots

Does this MR meet the acceptance criteria?

Conformity

Performance and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Alessio Caiazza

Merge request reports