baidu / baidu/openrasp

管理端默认下发配置有四个多余项。

Open
#433 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
3k
Forks
622
PR merge metrics
No merged PRs in 30d

Description

agent在加载云端下发的配置的时,每次包含如下四个配置项:fileleak_scan.name、fileleak_scan.interval、fileleak_scan.limit、log.maxstack,查看agent相关源码发现Configitem枚举类中也没有对应配置的定义,这四个配置项是mongo中app表默认就有的,在通用设置页面上也用到了其中后三个作为设置项。
问题:这四个默认自带的多余配置项,导致在本地日志或者在ES的error索引里可以看到大量比如“unknown config key fileleak_scan.name found in cloud configuration”这样的信息。
想确认下这四个配置项对应的实际功能在agent中是否并实现了或者后续是否有开发计划,删掉mongo中对应的默认配置对agent功能是否会有影响。

Contributor guide

Open the contributing guide

Research direction

Trace the agent's Configitem enum and the default entries in the MongoDB app table, then compare them with the common settings page and cloud-configuration handling. Determine whether these four settings are implemented or planned and whether removing the defaults is safe. Done means the unknown-key errors and configuration behavior are addressed with a confirmed decision.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp, elasticsearch, mongodb
Domain
backend, databases, observability
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.