Re: pgaudit - an auditing extension for PostgreSQL - Mailing list pgsql-hackers

From Fujii Masao
Subject Re: pgaudit - an auditing extension for PostgreSQL
Date
Msg-id CAHGQGwF8Y+ckO_uLnFhE4jasx0dHNyHFZ6jR21PEt9YQr2CK6A@mail.gmail.com
Whole thread Raw
In response to pgaudit - an auditing extension for PostgreSQL  (Ian Barwick <ian@2ndquadrant.com>)
Responses Re: pgaudit - an auditing extension for PostgreSQL  (Abhijit Menon-Sen <ams@2ndquadrant.com>)
List pgsql-hackers
On Fri, May 2, 2014 at 3:19 PM, Ian Barwick <ian@2ndquadrant.com> wrote:
> Hi
>
> Here is an initial version of an auditing extension for Postgres to
> generate log output suitable for compiling a comprehensive audit trail
> of database operations.

You added this into CF, but its patch has not been posted yet. Are you planning
to make a patch?

> Planned future improvements include:
>
> 1. Additional logging facilities, including to a separate audit
>    log file and to syslog, and potentially logging to a table
>    (possibly via a bgworker process). Currently output is simply
>    emitted to the server log via ereport().
>
> 2. To implement per-object auditing configuration, it would be nice to use
>    extensible reloptions (or an equivalent mechanism)

Is it possible to implement these outside PostgreSQL by using hooks?
If not, it might be better to implement audit feature in core from the
beginning.

Regards,

-- 
Fujii Masao



pgsql-hackers by date:

Previous
From: Andres Freund
Date:
Subject: Use a signal to trigger a memory context dump?
Next
From: Andres Freund
Date:
Subject: Re: idle_in_transaction_timeout