Skip to content

Conversation

@blackboxsw
Copy link
Collaborator

Provide an initial spike for logging OWASP formatted events in cloud-init for discussion. Integration tests will be added upon agreement for security logging procedures.

Proposed Commit Message

    feat: add OSWAP security event logging for user creation and system restart
    
    Implement OWASP structured logs in /var/log/cloud-init-security.log.
    
    Add security-related operations performed by cloud-init on behalf
    of user-data or platform meta-data:
    - user creation
    - user password change
    - system restart
    - system shutdown
    
    Default security log file can be changed by setting an alternative value
    for security_log_file in /etc/cloud/cloud.cfg(.d/*.cfg).

Additional Context

Test Steps

TODO: extend integration tests once initial discussion conclused

Merge type

  • Squash merge using "Proposed Commit Message"
  • Rebase and merge unique commits. Requires commit messages per-commit each referencing the pull request number (#<PR_NUM>)

…estart

Implement OWASP structured logs in /var/log/cloud-init-security.log.

Add security-related operations performed by cloud-init on behalf
of user-data or platform meta-data:
- user creation
- user password change
- system restart
- system shutdown

Default security log file can be changed by setting an alternative value
for security_log_file in /etc/cloud/cloud.cfg(.d/*.cfg).
@github-actions github-actions bot added the documentation This Pull Request changes documentation label Jan 26, 2026
@blackboxsw blackboxsw requested a review from holmanb January 26, 2026 21:48
@blackboxsw blackboxsw assigned blackboxsw and holmanb and unassigned blackboxsw Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation This Pull Request changes documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants