Establishing a chain of trust in a system log
Embodiments include a method, system, and computer program product for acquiring a data repository, the data repository being associated with a log configured to receive metadata. Then, a content of the log with respect to at least one manipulation of the data repository is modified by adding first metadata of the metadata. Further, signatures that identify control statements configured to govern the at least one manipulation of the data repository are collected by adding second metadata of the metadata into the log
1. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform:
acquiring a data repository, the data repository being associated with a log configured to receive metadata;
modifying a content of the log with respect to at least one manipulation of the data repository by adding first metadata of the metadata,
wherein the at least one manipulation of the data repository includes adding, deleting, or merging of components of the data repository; and
collecting signatures that identify control statements configured to govern the at least one manipulation of the data repository by: adding second metadata of the metadata into the log, packaging a modified data repository, the modified data repository including the data repository as changed by the at least one manipulation and the log with the metadata, tracking the control statements produced by a program executed by the processor, and generating the signatures based on the tracking of the control statements,
wherein the signatures preserve source and alteration information for each manipulation of the data repository.
2. The computer program product of claim 1 , wherein the first metadata includes information about a source of the log.
3. The computer program product of claim 1 , wherein the second metadata includes information about a modification program utilized to modify the content of the log.
4. The computer program product of claim 1 , wherein the metadata includes third metadata, the third metadata including rules for merging, deleting, or modifying the data repository or the log.
5. A system comprising:
a memory having computer readable instructions; and
a processor for executing the computer readable instructions, the computer readable instructions including:
acquiring a data repository, the data repository being associated with a log configured to receive metadata;
modifying a content of the log with respect to at least one manipulation of the data repository by adding first metadata of the metadata,
wherein the at least one manipulation of the data repository includes adding, deleting, or merging of components of the data repository; and
collecting signatures that identify control statements configured to govern the at least one manipulation of the data repository by: adding second metadata of the metadata into the log, packaging a modified data repository, the modified data repository including the data repository as changed by the at least one manipulation and the with the metadata, tracking the control statements produced by a program executed by the processor, and generating the signatures based on the tracking of the control statements,
wherein the signatures preserve source and alteration information for each manipulation of the data repository.
6. The system of claim 5 , wherein the first metadata includes information about a source of the log.
7. The system of claim 5 , wherein the second metadata includes information about a modification program utilized to modify the content of the log.
8. The system of claim 5 , wherein the metadata includes third metadata, the third metadata including rules for merging, deleting, or modifying the data repository or the log.