shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-01-10 05:18:17 +03:00
Code

Add Seal option in the configuration file for journald-remote

Browse Source 
While journal received remotely can be sealed, it can only be done
on the command line using --seal, so for consistency, we will
also permit to set it in the configuration file.
This commit is contained in:
Michael Scherer 2015-12-20 13:23:33 +01:00
parent d73fe9134f
commit 9d3737f13e
3 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
man/journal-remote.conf.xml
View File

@ -72,6 +72,13 @@
<literal>[Remote]</literal> section:</para> <literal>[Remote]</literal> section:</para>
<variablelist> <variablelist>
<varlistentry>
<term><varname>Seal=</varname></term>
<listitem><para>Periodically sign the data in the journal using Forward Secure Sealing.
</para></listitem>
</varlistentry>
<varlistentry> <varlistentry>
<term><varname>SplitMode=</varname></term> <term><varname>SplitMode=</varname></term>

1
src/journal-remote/journal-remote.c
View File

@ -1181,6 +1181,7 @@ static DEFINE_CONFIG_PARSE_ENUM(config_parse_write_split_mode,
static int parse_config(void) { static int parse_config(void) {
const ConfigTableItem items[] = { const ConfigTableItem items[] = {
{ "Remote", "Seal", config_parse_bool, 0, &arg_seal },
{ "Remote", "SplitMode", config_parse_write_split_mode, 0, &arg_split_mode }, { "Remote", "SplitMode", config_parse_write_split_mode, 0, &arg_split_mode },
{ "Remote", "ServerKeyFile", config_parse_path, 0, &arg_key }, { "Remote", "ServerKeyFile", config_parse_path, 0, &arg_key },
{ "Remote", "ServerCertificateFile", config_parse_path, 0, &arg_cert }, { "Remote", "ServerCertificateFile", config_parse_path, 0, &arg_cert },

1
src/journal-remote/journal-remote.conf.in
View File

@ -1,4 +1,5 @@
[Remote] [Remote]
# Seal=false
# SplitMode=host # SplitMode=host
# ServerKeyFile=@CERTIFICATEROOT@/private/journal-remote.pem # ServerKeyFile=@CERTIFICATEROOT@/private/journal-remote.pem
# ServerCertificateFile=@CERTIFICATEROOT@/certs/journal-remote.pem # ServerCertificateFile=@CERTIFICATEROOT@/certs/journal-remote.pem