!273 增加ssh登录失败检测项的yaml配置文件

Merge pull request !273 from a-alpha/alpha-dev
2023-07-20 03:26:45 +00:00 · 2023-07-20 03:26:45 +00:00 · d07d64afc2
parent 7285cbfbba 73e11ca398
commit d07d64afc2
1 changed files with 22 additions and 0 deletions
--- a/data/BaseLine/Audit/check_ssh_failed/check_ssh_failed.yaml
+++ b/data/BaseLine/Audit/check_ssh_failed/check_ssh_failed.yaml
@ -0,0 +1,22 @@
+FormatVer: 20230518
+Id: check_ssh_disable_port_forwarding
+Belong: baseline
+SiteInfo:
+    Name: 审计检查 -- 检查ssh登录失败ip和用户
+Power : "root"
+SiteRequests:
+    Implement: 
+        ImArray:
+            - Inter : python3
+              InterArgs :
+              Exec : check_ssh_failed.py
+              Args : 
+        Inter:
+            - "[WARNING]" 
+        Condition: None
+RepairArgs:
+    - Inter :
+      InterArgs :
+      Exec : ''
+      Args : 
+      RepairPower: # root # root权限或者普通用户权限