Enable protected tables plugin
Use the com.glide.security.protected_table.enabled property to prevent higher privilege users from tampering with log tables.
When the com.glide.security.protected_table.enabled system property is set to true, The Protected Tables plugin is utilized to prevent higher privilege users on an instance from tampering with log tables. The following logging tables will have special protections when this property is set to true:
- syslog (config not modifiable)
- syslog_transaction
- sys_outbound_http_log
- sysevent
- sys_audit
- sys_push_notification
- protected_table_configuration (config not modifiable)
- syslog_app_scope
More information
| Attribute | Description |
|---|---|
| Configuration name | com.glide.security.protected_table.enabled |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | Error handling and logging |
| Security risk | - Severity score: 4.0 - CVSS rating: Medium - Security risk details: Log integrity must be maintained to allow discovery of malicious activity. |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Error handling and logging