Bug 1590328

Summary: host last_checkin and global_status changes should not be audited
Product: Red Hat Satellite Reporter: Roman Plevka <rplevka>
Component: Audit LogAssignee: Tomer Brisker <tbrisker>
Status: CLOSED ERRATA QA Contact: Roman Plevka <rplevka>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.4CC: adprice, inecas, sshtein, tbrisker
Target Milestone: 6.4.0Keywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: tfm-rubygem-katello-3.7.0.rc1.2-0.1.rc1.2.el7sat Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-10-16 19:33:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Roman Plevka 2018-06-12 12:30:24 UTC
Description of problem:
the "last_checkin" and "global_status" attr. changes shouldn't be audited. This is currently audited and generates a lot of audit records.

Version-Release number of selected component (if applicable):
6.4.0-7

Steps to Reproduce:
1. register a content host to a satellite
2. check audits for a host-related record showing the global_status change
3. now edit the update interval parameter in  /etc/rhsm/rhsm.conf on the host to 1 minute and check the audit page for the host->last checkin records

Actual results:
the above attr changes are audited

Expected results:
the above attr changes are excluded from auditing

Comment 2 Tomer Brisker 2018-06-13 07:57:05 UTC
Created redmine issue http://projects.theforeman.org/issues/23913 from this bug

Comment 4 Satellite Program 2018-06-13 10:01:03 UTC
Upstream bug assigned to tbrisker

Comment 5 Satellite Program 2018-06-13 10:01:06 UTC
Upstream bug assigned to tbrisker

Comment 6 Satellite Program 2018-06-13 14:01:05 UTC
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/23914 has been resolved.

Comment 7 Roman Plevka 2018-07-26 13:47:17 UTC
VERIFIED
on sat6.4.0-13

- no more audit messages caused by host checkins

Comment 8 Bryan Kearney 2018-10-16 19:33:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:2927