Skip to content
This repository has been archived by the owner on Feb 8, 2024. It is now read-only.

Indicate whether session.network events were allowed or blocked #800

Merged
merged 2 commits into from
May 2, 2022

Conversation

zmb3
Copy link
Contributor

@zmb3 zmb3 commented May 2, 2022

We only have a single event type for all session.network events, whether the action was allowed or denied. This makes it hard for an administrator or auditor to detect malicious activity, because they have to look at the event JSON to get this info.

Fix this by updating the description in the audit log to clearly indicate whether the action was allowed or denied.

Fixes TEL-Q421-2
Fixes gravitational/teleport.e#331

@zmb3 zmb3 requested review from kimlisa and reedloden May 2, 2022 03:30
Copy link
Contributor

@reedloden reedloden left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This seems reasonable to me (and a great UI improvement!), though I defer to somebody like @kimlisa who knows this codebase better to make sure nothing has been missed.

Thanks for adding the additional test case!

@zmb3 zmb3 merged commit 0651e48 into master May 2, 2022
@zmb3 zmb3 deleted the zmb3/session-network-desc branch May 2, 2022 16:23
zmb3 added a commit that referenced this pull request May 2, 2022
* Indicate whether session.network events were allowed or blocked

Fixes TEL-Q421-2
Fixes gravitational/teleport.e#331
zmb3 added a commit that referenced this pull request May 2, 2022
* Indicate whether session.network events were allowed or blocked

Fixes TEL-Q421-2
Fixes gravitational/teleport.e#331
zmb3 added a commit that referenced this pull request May 3, 2022
#801)

* Indicate whether session.network events were allowed or blocked

Fixes TEL-Q421-2
Fixes gravitational/teleport.e#331
zmb3 added a commit that referenced this pull request May 3, 2022
#802)

* Indicate whether session.network events were allowed or blocked

Fixes TEL-Q421-2
Fixes gravitational/teleport.e#331
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants