jcoffey-dev
1d5a49409f
Personal-data catalog spec, default D1 (settled 2026-09-28): log files were never deleted. inbuxa:LogSettings.keepForDays says how many days rotated log files are kept; unset (null) keeps every file, as before, and a new install sets 30 days. It is a fork-owned setting, stored under T + l as audit retention is, not a field on x:TracerLog: that object is also stored inside x:Bootstrap with a field after it, so a new field would change x:Bootstrap's stored format. Server-level, with the tracers' permissions (sysTracerGet, sysTracerUpdate); changes are in the audit log, before and after. Log files are local, so every node deletes its own: hourly, and at once when the setting changes on that node. Only regular files named <prefix>.<something> in each enabled log tracer's directory, last changed more than the limit ago, are removed; the file being written is never that old, and nothing else in the directory is touched. Minimum one day. The catalog classifies inbuxa:LogSettings and points the log file's retention at it. Tested: unit tests for the file rule (only this log's old files; the current file, other files and directories stay) and a purge on disk; the system suite, which reads, sets, refuses zero, restores null and checks the audit records; fork checks.
18 lines
446 B
Rust
18 lines
446 B
Rust
/*
|
|
* SPDX-FileCopyrightText: 2026 Coffey Labs
|
|
*
|
|
* SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
//! Security hardening INBUXA adds of its own.
|
|
//!
|
|
//! Unlike the rest of this crate, these are not rebuilds of anything upstream
|
|
//! ships. The legacy-protocols switch is INBUXA's own design, specified in
|
|
//! `legacy-protocols.md`.
|
|
|
|
pub mod legacy_use;
|
|
pub mod log_files;
|
|
pub mod listeners;
|
|
pub mod protocol_policy;
|
|
pub mod tenant_protocol_policy;
|