55 lines
1.6 KiB
JSON
55 lines
1.6 KiB
JSON
|
|
{
|
||
|
|
"test_id": "SSH-C4",
|
||
|
|
"policy_file": "ssh_policies/ssh_c4.json",
|
||
|
|
"ssh_section": [
|
||
|
|
{ "action": "accept", "src": ["autogroup:member"], "dst": ["tag:server", "tag:prod"], "users": ["root"] }
|
||
|
|
],
|
||
|
|
"nodes": {
|
||
|
|
"user1": { "rules": [] },
|
||
|
|
"user-kris": { "rules": [] },
|
||
|
|
"user-mon": { "rules": [] },
|
||
|
|
"tagged-server": {
|
||
|
|
"rules": [
|
||
|
|
{
|
||
|
|
"principals": [
|
||
|
|
{ "nodeIP": "100.103.90.82" },
|
||
|
|
{ "nodeIP": "100.110.121.96" },
|
||
|
|
{ "nodeIP": "100.90.199.68" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::1737:7960" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::2d01:c747" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::9e37:5a52" }
|
||
|
|
],
|
||
|
|
"sshUsers": { "root": "root" },
|
||
|
|
"action": {
|
||
|
|
"accept": true,
|
||
|
|
"allowAgentForwarding": true,
|
||
|
|
"allowLocalPortForwarding": true,
|
||
|
|
"allowRemotePortForwarding": true
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"tagged-prod": {
|
||
|
|
"rules": [
|
||
|
|
{
|
||
|
|
"principals": [
|
||
|
|
{ "nodeIP": "100.103.90.82" },
|
||
|
|
{ "nodeIP": "100.110.121.96" },
|
||
|
|
{ "nodeIP": "100.90.199.68" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::1737:7960" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::2d01:c747" },
|
||
|
|
{ "nodeIP": "fd7a:115c:a1e0::9e37:5a52" }
|
||
|
|
],
|
||
|
|
"sshUsers": { "root": "root" },
|
||
|
|
"action": {
|
||
|
|
"accept": true,
|
||
|
|
"allowAgentForwarding": true,
|
||
|
|
"allowLocalPortForwarding": true,
|
||
|
|
"allowRemotePortForwarding": true
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|