|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/sos/report/plugins/__pycache__/ |
Upload File : |
o
-�_g� � @ s> d dl Z d dlmZ d dlmZmZmZ G dd� dee�ZdS )� N��glob)�Plugin�IndependentPlugin� PluginOptc @ sB e Zd ZdZdZdZeddedd�gZdd � Z d
d � Z
d d
� Z dS )�SshzSecure shell service�ssh)�services�security�system�identity� userconfsTz5Changes whether module will collect user .ssh configs)�default�val_type�descc C sF | � ddd�� g d�}| �|� | �|� | �d�r!| �� d S d S )N� sshd_config�
ssh_config)z/etc/ssh/sshd_config$z/etc/ssh/ssh_config$)z/etc/ssh/ssh_configz/etc/ssh/sshd_configz/etc/ssh/sshd_config.d/*r
)�
add_file_tags�
add_copy_spec�included_configs�
get_option�user_ssh_files_permissions)�self�sshcfgs� r �8/usr/lib/python3/dist-packages/sos/report/plugins/ssh.py�setup s �
�z Ssh.setupc C s� z\dd� dd� |D �D �}|D ]J}|� d�d }t| �|�ddd��/}|D ]$}t|� � �d ks4|�d
�r5q%|�� �d �rI|� � }| j|d |d
� q%W d � n1 sTw Y qW dS tyf Y dS w )z Include subconfig files c S s g | ] }|D ]}|�qqS r r )�.0�files�fr r r �
<listcomp>7 s ���z(Ssh.included_configs.<locals>.<listcomp>c S s g | ]}t |d d��qS )T)� recursiver )r �copyspecr r r r 8 s ��/����r�UTF-8��encodingr �#�include� )�tagsN)�split�open� path_join�len�
startswith�lowerr � Exception)r r �cfgfiles�sshcfg�tag�cfgfile�line�confargr r r r 3 s4 �� ��� ��� �zSsh.included_configsc
C s� t �� }i }z,tdddd��}|D ]}|�� dd� \}}|||< qW d � n1 s,w Y W n tyA | �d� Y dS w h d �}|D ]%}|j|v ra||j |v ra| �d
|j� d �� qH| �|jd �} | � | � qHdS )
z�
Iterate over .ssh folders in user homes to see their permissions.
Bad permissions can prevent SSH from allowing access to given user.
z /proc/mountsr% r& r' r+ � NzCouldn't read /proc/mounts> �nfs�nfs4�autofszSkipping capture in z because it's a remote directoryz.ssh)
�pwd�getpwallr. r- r3 �
_log_error�pw_dir� _log_infor/ �add_dir_listing)
r �
users_data�
fs_mount_info� mounts_filer8 �fs_file� fs_vstype� non_local_fs�user�home_dirr r r r K s2
� ��
�
� �z Ssh.user_ssh_files_permissionsN) �__name__�
__module__� __qualname__�
short_desc� plugin_name�profilesr �str� option_listr r r r r r r r s �� r )r> r �sos.report.pluginsr r r r r r r r �<module> s