Skip to content

Conversation

gueyebabacar
Copy link

@gueyebabacar gueyebabacar commented Mar 26, 2025

Description

Problem

The accesslogs and management_accesslogs files of VitamUI were not compressed during daily rotation.

Resolution

  1. Creation of /etc/logrotate.d/vitamui with the following configuration:

    • Log targeting: /vitamui/log/*/accesslog*.log /vitamui/log/*/management_accesslog*.log
    • Detailed options:
      • "daily": Rotation performed once a day.
      • "rotate 7": Retention of the last 7 versions of the logs before deletion.
      • "compress": Compression of rotated logs in gzip format (.gz).
      • "missingok": Ignores errors if a targeted log file does not exist.
      • "notifempty": Does not rotate files if they are empty.
      • "create 640 root root": Creates a new log file after rotation with permissions 640 (read/write for root, read for the root group).
      • "dateext": Adds the date to the name of rotated files (e.g., -20250326).
  2. Verification that logrotate is scheduled in /etc/cron.daily/ for automatic daily execution.

Result

The logs are now rotated daily and compressed in .gz format, as required.

Type of Change

  • Ansible Management
  • Fix

Contributor

  • Program Vitam

@gueyebabacar gueyebabacar added the bug Something isn't working label Mar 26, 2025
@vitam-prg
Copy link
Collaborator

vitam-prg commented Mar 26, 2025

Logo
Checkmarx One – Scan Summary & Detailsfb51f88a-fffc-427c-acd5-0e296ecc85aa

New Issues (67)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
HIGH Passwords And Secrets - Generic Password /vitamui_vars.yml: 205
detailsQuery to find passwords and secrets in infrastructure code.
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionArchiveUnitController.java: 197
detailsMethod startDeletionAction at line 197 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionArchiveUnitControll...
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionArchiveUnitController.java: 197
detailsMethod startDeletionAction at line 197 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionArchiveUnitControll...
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionArchiveUnitController.java: 197
detailsMethod startDeletionAction at line 197 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionArchiveUnitControll...
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 183
detailsMethod reclassification at line 183 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets u...
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 183
detailsMethod reclassification at line 183 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets u...
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 183
detailsMethod reclassification at line 183 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets u...
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 183
detailsMethod reclassification at line 183 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets u...
Attack Vector
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 183
detailsMethod reclassification at line 183 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets u...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 229
detailsMethod updateArchiveUnitsRules at line 229 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Arch...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 218
detailsMethod startEliminationUnitTreeAction at line 218 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/re...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 239
detailsMethod computedInheritedRules at line 239 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archi...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 249
detailsMethod selectUnitWithInheritedRules at line 249 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 259
detailsMethod reclassification at line 259 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSea...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 208
detailsMethod startEliminationAction at line 208 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archi...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 249
detailsMethod selectUnitWithInheritedRules at line 249 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 116
detailsMethod searchArchiveUnitsByCriteria at line 116 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 239
detailsMethod computedInheritedRules at line 239 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archi...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 249
detailsMethod selectUnitWithInheritedRules at line 249 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 259
detailsMethod reclassification at line 259 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSea...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 198
detailsMethod startEliminationAnalysis at line 198 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Arc...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 208
detailsMethod startEliminationAction at line 208 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archi...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 218
detailsMethod startEliminationUnitTreeAction at line 218 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/re...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 229
detailsMethod updateArchiveUnitsRules at line 229 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Arch...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 178
detailsMethod exportDIPByCriteria at line 178 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archives...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 188
detailsMethod transferRequest at line 188 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSear...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 168
detailsMethod exportCsvArchiveUnitsByCriteria at line 168 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/r...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 239
detailsMethod computedInheritedRules at line 239 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archi...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 229
detailsMethod updateArchiveUnitsRules at line 229 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Arch...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 178
detailsMethod exportDIPByCriteria at line 178 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archives...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 188
detailsMethod transferRequest at line 188 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSear...
Attack Vector
LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 168
detailsMethod exportCsvArchiveUnitsByCriteria at line 168 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/r...
Attack Vector

More results are available on the CxOne platform

Fixed Issues (1)
Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
HIGH Passwords And Secrets - Generic Password /vitamui_vars.yml: 204

@gueyebabacar gueyebabacar added this to the IT 150 milestone Mar 26, 2025
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch 3 times, most recently from 42ceeb5 to e7e7927 Compare March 28, 2025 10:05
@GiooDev GiooDev added the OPS REVIEW Mandatory if deployment/ directory is modified. label Mar 31, 2025
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch 2 times, most recently from 9a0770a to 21bf6c8 Compare March 31, 2025 10:02
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch from 21bf6c8 to 935a58c Compare March 31, 2025 12:22
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch 4 times, most recently from 1a6efee to 81ff4e5 Compare March 31, 2025 13:35
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch from 81ff4e5 to b394c28 Compare April 1, 2025 07:47
@GiooDev GiooDev modified the milestones: IT 150, IT 151 Apr 2, 2025
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch from b394c28 to 9fe8df1 Compare April 4, 2025 14:14
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch 2 times, most recently from 323bfef to 4089be6 Compare April 8, 2025 14:04
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch from 4089be6 to 7874572 Compare April 8, 2025 15:21
@gueyebabacar gueyebabacar force-pushed the bug_13788_fix-vitamui-log-rotation-compression branch from 7874572 to 0e1eb30 Compare April 8, 2025 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working OPS REVIEW Mandatory if deployment/ directory is modified.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants