Adding logging.config.listen() plugin with examples

[raj3shp]

Hi,
I would like to contribute a plugin based on Python's security consideration regarding logging.

The actual issue (usage of eval()) is when logging.config.fileConfig is called on an untrusted configuration file. However, it seems very obvious that configuration files are critical for security so will be write-protected to authorised users. The interesting attack vector is possible when an application exposes socket server to listen for configuration file from a network socket that a local attacker can exploit.

So this plugin checks for usage of logging.config.listen without verify argument which allows integrity checking or encryption/decryption capability to prevent abuse.

(all tox tests passed)

[ericwb]

Thanks for the additional plugin. I've noted some things to correct.

Also, you'll need to add a doc under doc/source/plugins/b612_......

[raj3shp]

Thanks for the review. I've pushed the changes. Cheers!

[ericwb]

LGTM