| Current File : //usr/lib/python3.6/site-packages/sos/report/plugins/__pycache__/ssh.cpython-36.pyc |
3
\��h� � @ s> d dl Z d dlmZ d dlmZmZmZ G dd� dee�ZdS )� N)�glob)�Plugin�IndependentPlugin� PluginOptc @ s@ e Zd ZdZdZdZeddd d
�gZd d � Zd
d� Z dd� Z
dS )�SshzSecure shell serviceZssh�services�security�system�identity� userconfsFz5Changes whether module will collect user .ssh configs)�defaultZdescc C sN | j ddd�� dddg}| j|� | j|� | jd�r@| j� | jd� d S ) NZ sshd_configZ
ssh_config)z/etc/ssh/sshd_config$z/etc/ssh/ssh_config$z/etc/ssh/ssh_configz/etc/ssh/sshd_configz/etc/ssh/sshd_config.d/*r zsshd -T)Z
add_file_tags�
add_copy_spec�included_configsZ
get_option�user_ssh_files_permissionsZadd_cmd_output)�self�sshcfgs� r �/usr/lib/python3.6/ssh.py�setup s
z Ssh.setupc C s� y�dd� dd� |D �D �}x�|D ]�}|j d�d }t| j|�ddd��X}xP|D ]H}t|j � �d ksN|jd
�rnqN|j� jd �rN|j � }| j|d |d � qNW W d
Q R X q W W n tk
r� Y nX d
S )z Include subconfig files c S s g | ]}|D ]}|�q qS r r )�.0�files�fr r r �
<listcomp>; s z(Ssh.included_configs.<locals>.<listcomp>c S s g | ]}t |d d��qS )T)� recursive)r )r Zcopyspecr r r r < s �/� �rzUTF-8)�encodingr �#�include)ZtagsN���)�split�open� path_join�len�
startswith�lowerr
� Exception)r r ZcfgfilesZsshcfg�tagZcfgfile�lineZconfargr r r r 6 s
(zSsh.included_configsc
C s� t j� }i }yHtdddd��0}x(|D ] }|j� dd� \}}|||< q$W W dQ R X W n tk
rr | jd� dS X d d
d h}xR|D ]J}|j|kr�||j |kr�| jd |j� d
�� q�| j|jd�} | j | � q�W dS )z�
Iterate over .ssh folders in user homes to see their permissions.
Bad permissions can prevent SSH from allowing access to given user.
z /proc/mountsr zUTF-8)r r � NzCouldn't read /proc/mountsZnfsZnfs4ZautofszSkipping capture in z because it's a remote directoryz.ssh)
�pwdZgetpwallr" r! r' Z
_log_error�pw_dirZ _log_infor# Zadd_dir_listing)
r Z
users_dataZ
fs_mount_infoZ mounts_filer) Zfs_fileZ fs_vstypeZ non_local_fs�userZhome_dirr r r r N s&
z Ssh.user_ssh_files_permissionsN)r r r r
) �__name__�
__module__� __qualname__Z
short_descZ plugin_nameZprofilesr Z option_listr r r r r r r r s
r )r+ r Zsos.report.pluginsr r r r r r r r �<module> s