Skip to content

[NOMERGE] Add buendia-security-monitor package.#252

Open
schuyler wants to merge 18 commits intodevfrom
schuyler/security-monitor
Open

[NOMERGE] Add buendia-security-monitor package.#252
schuyler wants to merge 18 commits intodevfrom
schuyler/security-monitor

Conversation

@schuyler
Copy link
Copy Markdown
Member

This PR implements buendia-security-monitor, which primarily serves the function of removing the local database encryption keys if the server has not connected to the configured wifi network in a preset span of time since boot.

This PR is dependent on #251 and is not ready for merge.

Intended for use with the Buendia system key.
Specifically for encryption support.
Essentially, ensure that openmrs.zip and buendia.tar.gz are encrypted
using the Buendia system key.

The patient chart ZIP is already encrypted with the OpenMRS server
password, so we're leaving that untouched for now.
before decrypting.

This will hopefully minimize the risk of running out of space on the
backup storage device, since the decryption process has to make a copy
of the output on disk.
…king.state so that buendia-security-monitor can tell when we were last confirmed connected to a WiFi network.
buendia-security-monitor is designed to remove the Buendia system keys
in the event that a Buendia system with user records is configured to
talk to a particular wifi network but cannot connect to that network
within $SECURITY_MONITOR_TIMEOUT_MINS minutes of booting.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants