ssh-guard/test.toml at master · DaRacci/ssh-guard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
roots = []
units = []

[global]
audit_log = "/tmp/ssh-guard.log"
audit_format = "logfmt"
help_text = ""
log_tag = "ssh-guard"
max_read_bytes = 1048576
max_tail_lines = 5000
default_tail_lines = 200

[contracts.unit]
type = "enum"
values = [
    "angrr",
    "attic-watch-store",
    "nix-gc",
]

[flag_groups]
sys-common = [
    "--no-pager",
    "--full",
]

[[rules]]
implicit_symlinks = true
arg_style = "gnu_long"

[rules.action]
type = "run"
binary = "/run/current-system/sw/bin/systemctl"
args = []
timeout = "5000ms"

[[rules.subcommands]]
name = "status"
args = ["{unit}.service"]

[[rules.subcommands]]
name = "show"
args = ["{unit}"]

[[rules]]
implicit_symlinks = true
arg_style = "gnu_long"
flags = [
    "--since",
    "-n",
    "--no-pager",
]

[rules.action]
type = "run"
binary = "/run/current-system/sw/bin/journalctl"
args = []
timeout = "5000ms"

[profiles.admin]
users = ["root", "admin"]

[profiles.admin.global]
audit_log = "/tmp/ssh-guard-admin.log"
help_text = "Admin commands: systemctl, journalctl"

[profiles.admin.contracts]
port = { type = "int_range", min = 1, max = 65535 }

[profiles.admin.flag_groups]
admin-common = ["--verbose"]

[[profiles.admin.rules]]
implicit_symlinks = true
arg_style = "gnu_long"

[profiles.admin.rules.action]
type = "run"
binary = "/run/current-system/sw/bin/ss"
args = []
timeout = "5000ms"

[[profiles.admin.rules.subcommands]]
name = "-tlnp"