tlog

This role sets up a system for Terminal session recording. It configures tlog to record session data in the systemd journal.

Requirements

This role works only on RHEL8/CentOS8 and Fedora.

Collection Requirements

It requires the ini_file module from the community.general collection and uses other collections for rpm-ostree support. To install the necessary collections, run this command:

ansible-galaxy collection install -vv -r meta/collection-requirements.yml

Role Variables

You can configure session recording with SSSD, which is the recommended way to manage recorded users or groups. This will enable the SSSD files provider.

• tlog_use_sssd (default: true)

Set the SSSD recording scope to all, some, or none:

• tlog_scope_sssd (default: none)

List of users to be recorded (in YAML format):

• tlog_users_sssd (default: [])

List of groups to be recorded (in YAML format):

• tlog_groups_sssd (default: [])

List of users to exclude from recording (only for scope=all):

• tlog_exclude_users_sssd (default: [])

List of groups to exclude from recording (only for scope=all):

• tlog_exclude_groups_sssd (default: [])

Example Playbook

- name: Deploy session recording
  hosts: all
  roles:
    - linux-system-roles.tlog
  vars:
    tlog_scope_sssd: some
    tlog_users_sssd:
      - recordeduser

Testing

Testing is performed using the tests/tests_*.yml playbooks. For more information, check contributing.md.

rpm-ostree

Refer to README-ostree.md for details.

License

GPL v3.0

Author Information

• Nathan Kinder @nkinder

• Kirill Glebov @sabbaka