Page MenuHomeMiraheze

Consider enabling logging of CU data for logins
Closed, ResolvedPublic

Description

Stewards have been approached for usefulness and I'll ping Owen an FYI on the legal grounds.

Per changes with 1.36 and upstream info on what they estimated, We'd like to see if logging logins on all wikis except loginwiki where the login was not successful and made by a bot account is useful.

Related Objects

StatusAssignedTask
ResolvedJohn
ResolvedReception123
ResolvedUnknown Object (User)
ResolvedUnknown Object (User)

Event Timeline

RhinosF1 triaged this task as High priority.May 31 2021, 10:50
RhinosF1 created this task.
RhinosF1 lowered the priority of this task from High to Low.May 31 2021, 10:50

Not a rush

Unknown Object (User) moved this task from Backlog to Short Term on the MediaWiki (SRE) board.Jun 2 2021, 10:35
Unknown Object (User) moved this task from Unsorted to Short Term on the Universal Omega board.

Please try to avoid subscribing everyone from the parent task.

Per changes with 1.36 and upstream info on what they estimated, We'd like to see if logging logins on all wikis except loginwiki where the login was not successful and made by a bot account is useful.

But why though?

To support Stewards and T&S in their actions against abuse.

This comment was removed by Bukkit.

Okay, I get what you're saying.

We should also configure the options wgCheckUserCAMultiLock, wgCheckUserCAtoollink, and wgCheckUserGBtoollink.

Unknown Object (User) claimed this task.Jun 15 2021, 15:45

I'll do a PR to set the config with stewards' support then.

For clarity, now that I think I've got this figured out, this would enable logging for all logins, successful or not. The option wgCheckUserLogSuccessfulBotLogins additionally enables the logging of successful bot account logins (which is not enabled by the wgCheckUserLogLogins option)

$wgCheckUserLogLogins is one I definitely think we should enable. From the sounds of @Void's response, $wgCheckUserLogSuccessfulBotLogins could be useful also.

Unknown Object (User) closed this task as Resolved.Jun 19 2021, 03:17
Unknown Object (User) added a commit: R9:4d1193abddbe: Enable some CheckUser configs (#3965).

This is now done.