3
ܓi @ s> d dl Z d dlmZ d dlmZmZmZ G dd deeZdS ) N)glob)PluginIndependentPlugin PluginOptc @ s@ e Zd ZdZdZdZeddd d
gZd d Zd
d Z dd Z
dS )SshzSecure shell serviceZsshservicessecuritysystemidentity userconfsFz5Changes whether module will collect user .ssh configs)defaultZdescc C sN | j ddd dddg}| j| | j| | jdr@| j | jd d S ) NZ sshd_configZ
ssh_config)z/etc/ssh/sshd_config$z/etc/ssh/ssh_config$z/etc/ssh/ssh_configz/etc/ssh/sshd_configz/etc/ssh/sshd_config.d/*r zsshd -T)Z
add_file_tags
add_copy_specincluded_configsZ
get_optionuser_ssh_files_permissionsZadd_cmd_output)selfsshcfgs r /usr/lib/python3.6/ssh.pysetup s
z Ssh.setupc C s ydd dd |D D }x|D ]}|j dd }t| j|dddX}xP|D ]H}t|j d ksN|jd
rnqN|j jd rN|j }| j|d |d qNW W d
Q R X q W W n tk
r Y nX d
S )z Include subconfig files c S s g | ]}|D ]}|q qS r r ).0filesfr r r
; s z(Ssh.included_configs..c S s g | ]}t |d dqS )T) recursive)r )r Zcopyspecr r r r < s / rzUTF-8)encodingr #include)ZtagsN)splitopen path_joinlen
startswithlowerr
Exception)r r ZcfgfilesZsshcfgtagZcfgfilelineZconfargr r r r 6 s
(zSsh.included_configsc
C s t j }i }yHtdddd0}x(|D ] }|j dd \}}|||< q$W W dQ R X W n tk
rr | jd dS X d d
d h}xR|D ]J}|j|kr||j |kr| jd |j d
q| j|jd} | j | qW dS )z
Iterate over .ssh folders in user homes to see their permissions.
Bad permissions can prevent SSH from allowing access to given user.
z /proc/mountsr zUTF-8)r r NzCouldn't read /proc/mountsZnfsZnfs4ZautofszSkipping capture in z because it's a remote directoryz.ssh)
pwdZgetpwallr" r! r' Z
_log_errorpw_dirZ _log_infor# Zadd_dir_listing)
r Z
users_dataZ
fs_mount_infoZ mounts_filer) Zfs_fileZ fs_vstypeZ non_local_fsuserZhome_dirr r r r N s&
z Ssh.user_ssh_files_permissionsN)r r r r
) __name__
__module__ __qualname__Z
short_descZ plugin_nameZprofilesr Z option_listr r r r r r r r s
r )r+ r Zsos.report.pluginsr r r r r r r r s