finn/max
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Note that fail2ban depends on the order of the audit fields

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
finnandClaude Opus 5.5 committed 2026-10-23 19:42:53 +00:00
1 parent a424d9b87f
commit c1843b3e49
1 file changed
+3
Download Patch File Download Diff File Expand all files Collapse all files
max/audit.py
+3
View File
@@ -6,6 +6,9 @@ def audit(event, actor=None, target=None, **fields):
Logs a security relevant event as one line with the message "audit". actor is the Logs a security relevant event as one line with the message "audit". actor is the
acting user, None for anonymous requests. target is the affected user, if any. acting user, None for anonymous requests. target is the affected user, if any.
""" """
# The order of the first fields is fixed: fail2ban matches
# 'audit event=… actor_user_id=… actor_email=… ip="<HOST>"' (filter max.conf on the VPS).
# Change the filter when changing the order or the names.
values = dict( values = dict(
event=event, event=event,
actor_user_id=actor.id if actor is not None else None, actor_user_id=actor.id if actor is not None else None,