59 lines
1.6 KiB
JSON
59 lines
1.6 KiB
JSON
|
|
{
|
||
|
|
"test_id": "SSH-A3",
|
||
|
|
"policy_file": "ssh_policies/ssh_a3.json",
|
||
|
|
"ssh_section": [
|
||
|
|
{
|
||
|
|
"action": "accept",
|
||
|
|
"src": ["autogroup:member"],
|
||
|
|
"dst": ["autogroup:self"],
|
||
|
|
"users": ["root", "autogroup:nonroot"]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"nodes": {
|
||
|
|
"user1": {
|
||
|
|
"rules": [
|
||
|
|
{
|
||
|
|
"principals": [{ "nodeIP": "100.90.199.68" }, { "nodeIP": "fd7a:115c:a1e0::2d01:c747" }],
|
||
|
|
"sshUsers": { "*": "=", "root": "root" },
|
||
|
|
"action": {
|
||
|
|
"accept": true,
|
||
|
|
"allowAgentForwarding": true,
|
||
|
|
"allowLocalPortForwarding": true,
|
||
|
|
"allowRemotePortForwarding": true
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"user-kris": {
|
||
|
|
"rules": [
|
||
|
|
{
|
||
|
|
"principals": [{ "nodeIP": "100.110.121.96" }, { "nodeIP": "fd7a:115c:a1e0::1737:7960" }],
|
||
|
|
"sshUsers": { "*": "=", "root": "root" },
|
||
|
|
"action": {
|
||
|
|
"accept": true,
|
||
|
|
"allowAgentForwarding": true,
|
||
|
|
"allowLocalPortForwarding": true,
|
||
|
|
"allowRemotePortForwarding": true
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"user-mon": {
|
||
|
|
"rules": [
|
||
|
|
{
|
||
|
|
"principals": [{ "nodeIP": "100.103.90.82" }, { "nodeIP": "fd7a:115c:a1e0::9e37:5a52" }],
|
||
|
|
"sshUsers": { "*": "=", "root": "root" },
|
||
|
|
"action": {
|
||
|
|
"accept": true,
|
||
|
|
"allowAgentForwarding": true,
|
||
|
|
"allowLocalPortForwarding": true,
|
||
|
|
"allowRemotePortForwarding": true
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"tagged-server": { "rules": [] },
|
||
|
|
"tagged-prod": { "rules": [] }
|
||
|
|
}
|
||
|
|
}
|