github
/
mysql-audit
mirror of https://github.com/mcafee-enterprise/mysql-audit
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #103 from RickPizzi/master 

new option audit_record_logins to enable logging of Connect and Quit cmds
pull/141/head
Guy Lichtman 2015-02-09 23:38:29 +02:00
parent a1c8250058 de390805f1
commit 00194ab4bb
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/audit_plugin.cc
View File

@ -44,6 +44,7 @@ static Audit_json_formatter json_formatter;
//flags to hold if audit handlers are enabled //flags to hold if audit handlers are enabled
static my_bool json_file_handler_enable = FALSE; static my_bool json_file_handler_enable = FALSE;
static my_bool record_logins_enable = FALSE;
static my_bool json_file_handler_flush = FALSE; static my_bool json_file_handler_flush = FALSE;
static my_bool json_socket_handler_enable = FALSE; static my_bool json_socket_handler_enable = FALSE;
static my_bool uninstall_plugin_enable = FALSE; static my_bool uninstall_plugin_enable = FALSE;
@ -220,6 +221,15 @@ static void audit(ThdSesData *pThdData)
return; return;
} }
} }
if (record_logins_enable) {
const char * cmd = pThdData->getCmdName();
const char * user = pThdData->getUserName();
if (!strcasecmp(cmd, "Connect") || !strcasecmp(cmd, "Quit") || !strcasecmp(cmd, "Failed Login")) {
if(user && strlen( user))
Audit_handler::log_audit_all(pThdData);
return;
}
}
if (num_record_cmds > 0) { if (num_record_cmds > 0) {
const char * cmd = pThdData->getCmdName(); const char * cmd = pThdData->getCmdName();
const char *cmds[2]; const char *cmds[2];
@ -1569,6 +1579,10 @@ static MYSQL_SYSVAR_BOOL(header_msg, json_formatter.m_write_start_msg,
PLUGIN_VAR_RQCMDARG, PLUGIN_VAR_RQCMDARG,
"AUDIT write header message at start of logging or file flush Enable|Disable. Default enabled.", NULL, NULL, 1); "AUDIT write header message at start of logging or file flush Enable|Disable. Default enabled.", NULL, NULL, 1);
static MYSQL_SYSVAR_BOOL(record_logins, record_logins_enable,
PLUGIN_VAR_RQCMDARG,
"AUDIT record Connect and Quit commands Enable|Disable. Default enabled.", NULL, NULL, 1);
static MYSQL_SYSVAR_STR(json_log_file, json_file_handler.m_io_dest, static MYSQL_SYSVAR_STR(json_log_file, json_file_handler.m_io_dest,
PLUGIN_VAR_RQCMDARG | PLUGIN_VAR_MEMALLOC, PLUGIN_VAR_RQCMDARG | PLUGIN_VAR_MEMALLOC,
"AUDIT plugin json log file name", "AUDIT plugin json log file name",
@ -1693,6 +1707,7 @@ static MYSQL_SYSVAR_STR(record_objs, record_objs_string,
static struct st_mysql_sys_var* audit_system_variables[] = static struct st_mysql_sys_var* audit_system_variables[] =
{ {
MYSQL_SYSVAR(header_msg), MYSQL_SYSVAR(header_msg),
MYSQL_SYSVAR(record_logins),
MYSQL_SYSVAR(json_log_file), MYSQL_SYSVAR(json_log_file),
MYSQL_SYSVAR(json_file_sync), MYSQL_SYSVAR(json_file_sync),
MYSQL_SYSVAR(json_file_retry), MYSQL_SYSVAR(json_file_retry),