Limiting Access to the Log Directory
- Aryn Wiebe
IguanaX is often used to transmit messages containing sensitive protected health information (PHI). This information is temporarily stored in Iguana’s logs, in a specified Log Directory on disk.
All access to the logs should be through the IguanaX Logs interface.
The Log Directory should ideally only be accessible to the Iguana Windows Service User or Linux Daemon User. It is recommended to modify the operating system permissions on the specified Log Directory to ensure that the files containing log messages cannot be accessed by people who are not authorized to view them.
Note: The system user that runs your backup software will need read access to the log files.
In File Explorer, locate the Log Directory. By default, this is located in the working directory:
C:\ProgramData\IguanaX\logtRight-click the logs directory to select Properties.
In the Properties window, select the Security tab, to display the security options for the logs directory, click Edit.
In the Permissions for logt window:
Select a User for which you want to limit access (If the user is not listed in this pane, click Add to add the user to the list).
In the Deny column, select the permissions that you want to allow or disallow for that user.
Click Apply to apply your changes.
Repeat the above three steps for all users for which you want to limit permissions. When you are finished, click OK to close the Properties window.