mirror of
https://github.com/trailofbits/algo.git
synced 2025-09-09 05:23:16 +02:00
db02a8f8aa
- Add no_log directives to all cloud provider credential handling - Set privacy-focused defaults (StrongSwan logging disabled, DNSCrypt syslog off) - Implement privacy role with log rotation, history clearing, and log filtering - Add Privacy Considerations section to README - Make all privacy features configurable and enabled by default This update significantly reduces Algo's logging footprint to enhance user privacy while maintaining the ability to enable logging for debugging when needed.
32 lines
No EOL
1 KiB
Django/Jinja
32 lines
No EOL
1 KiB
Django/Jinja
# Privacy-enhanced rsyslog configuration
|
|
# Minimal logging configuration for enhanced privacy
|
|
# Generated by Algo VPN privacy role
|
|
|
|
# Global settings for privacy
|
|
$ModLoad imuxsock # provides support for local system logging
|
|
$ModLoad imklog # provides kernel logging support
|
|
|
|
# Reduce logging verbosity
|
|
$KLogPermitNonKernelFacility on
|
|
$SystemLogSocketName /run/systemd/journal/syslog
|
|
|
|
# Privacy-enhanced rules
|
|
{% if privacy_advanced.reduce_kernel_verbosity %}
|
|
# Reduce kernel message verbosity
|
|
kern.info;kern.!debug /var/log/kern.log
|
|
{% else %}
|
|
kern.* /var/log/kern.log
|
|
{% endif %}
|
|
|
|
# Essential system messages only
|
|
*.emerg :omusrmsg:*
|
|
*.alert /var/log/alert.log
|
|
*.crit /var/log/critical.log
|
|
*.err /var/log/error.log
|
|
|
|
# Compress and limit emergency logs
|
|
$template PrivacyTemplate,"%timegenerated% %hostname% %syslogtag%%msg%\n"
|
|
$ActionFileDefaultTemplate PrivacyTemplate
|
|
|
|
# Stop processing after essential logs to prevent detailed logging
|
|
& stop |