File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/beacons/__pycache__/btmp.cpython-310.pyc
Back
o ;j�! � @ s� d Z ddlZddlZddlZddlZddlZddlZddlZdZ dZ dZ g d�Z e� e �ZdZe�e�Zz ddlmZ dZW n eyI d ZY nw d d � Zd d � Zdd� Zdd� Zdd� Z dd� Z dd� Z dS )a? Beacon to fire events at failed login of users .. versionadded:: 2015.5.0 Example Configuration ===================== .. code-block:: yaml # Fire events on all failed logins beacons: btmp: [] # Matching on user name, using a default time range beacons: btmp: - users: gareth: - defaults: time_range: start: '8am' end: '4pm' # Matching on user name, overriding the default time range beacons: btmp: - users: gareth: time_range: start: '8am' end: '4pm' - defaults: time_range: start: '8am' end: '4pm' # Matching on group name, overriding the default time range beacons: btmp: - groups: users: time_range: start: '8am' end: '4pm' - defaults: time_range: start: '8am' end: '4pm' Use Case: Posting Failed Login Events to Slack ============================================== This can be done using the following reactor SLS: .. code-block:: jinja report-wtmp: runner.salt.cmd: - args: - fun: slack.post_message - channel: mychannel # Slack channel - from_name: someuser # Slack user - message: "Failed login from `{{ data.get('user', '') or 'unknown user' }}` on `{{ data['id'] }}`" Match the event like so in the master config file: .. code-block:: yaml reactor: - 'salt/beacon/*/btmp/': - salt://reactor/btmp.sls .. note:: This approach uses the :py:mod:`slack execution module <salt.modules.slack_notify>` directly on the master, and therefore requires that the master has a slack API key in its configuration: .. code-block:: yaml slack: api_key: xoxb-XXXXXXXXXXXX-XXXXXXXXXXXX-XXXXXXXXXXXXXXXXXXXXXXXX See the :py:mod:`slack execution module <salt.modules.slack_notify>` documentation for more information. While you can use an individual user's API key to post to Slack, a bot user is likely better suited for this. The :py:mod:`slack engine <salt.engines.slack>` documentation has information on how to set up a bot user. � NZbtmpz /var/log/btmps hi32s4s32s256shhiii4i20x) �typeZPID�lineZinittab�user�hostname� exit_status�session�time�addrzbtmp.locTFc C s0 t j�t�rtS t� d�} t�dt| � d| fS )Nz does not exist.z Unable to load %s beacon: %sF)�os�path�isfile�BTMP�__virtualname__�log�error)�err_msg� r �E/opt/saltstack/salt/lib/python3.10/site-packages/salt/beacons/btmp.py� __virtual__� s r c sD � s||fS t � t�sd}d}t� fdd�dD ��s d}d}||fS )� Check time range Fz>The time_range parameter for btmp beacon must be a dictionary.c 3 s � | ]}|� v V qd S )Nr )�.0�k��tranger r � <genexpr>� s � z'_validate_time_range.<locals>.<genexpr>)�start�endzJThe time_range parameter for btmp beacon must contain start & end options.)� isinstance�dict�all)r �status�msgr r r �_validate_time_range� s �r" c C sF t d | �}|st�d| � dS |d D ] }||vr || ||< qdS )z Gather group members z group.infoz"Group %s does not exist, ignoring.N�members)Z__salt__r �warning)�group�groups�users�_group�memberr r r �_gather_group_members� s ��r* c C sL t r t�| d �}t�| d �}t|| ko|k�S �S t�d� dS )r r r zDateutil is required.F)�_TIME_SUPPORTED�dateutil_parser�parse�boolr r )� time_range�nowZ_startZ_endr r r �_check_time_range� s r1 c C s t tv rtt S dS )z) return the active file location N)�LOC_KEY� __context__r r r r �_get_loc� s �r4 c C s@ d}d}t | t�sd}d}||fS tjj�| �} d| v rGt | d t�s(d}d}n| d D ]}| d | �di �}t|||�\}}q,|sG||fS d| v rvt | d t�sWd}d }n| d D ]}| d | �di �}t|||�\}}q[|sv||fS d | v r�t | d t�s�d}d }n| d �di �}t|||�\}}|s�||fS ||fS ) z+ Validate the beacon configuration TzValid beacon configurationFz-Configuration for btmp beacon must be a list.r' z8User configuration for btmp beacon must be a dictionary.r/ r& z9Group configuration for btmp beacon must be a dictionary.�defaultsz<Defaults configuration for btmp beacon must be a dictionary.) r �list�salt�utilsZbeaconsZ list_to_dictr �getr" )�configZvstatusZvmsgr Z _time_ranger% r r r �validate� sD %� r; c C s8 g }i }i }d}| D ]}d|v r|d }d|v r |d }d|v r$|d }q t jj�td���}t�td�}|dkrM|�dd� |� � tt< |W d � S |�|� t j � � }|� t �} t| �t krl|W d � S |� � tt< t�t| �} i } tt�D ].\} } | | | | < t| | ttf�r�t| | t�r�t jj�| | �| | < | | �d �| | < q~|D ]}t|||� q�|r�| d |v r�|| d }t|t�r�d |v r�t |d |�r�|� | � n4|r�d |v r�t |d |�r�|� | � n!|� | � n|�r d |v �r t |d |��r |� | � n|� | � qS1 �sw Y |S ) zM Read the last btmp file and return information on the failed logins Nr' r& r5 �rbr � T� r r/ ) r7 r8 �filesZfopenr r3 r9 r2 �seek�tell�datetimer0 �read�SIZE�len�struct�unpack�FMT� enumerate�FIELDSr �str�bytesZ stringutilsZ to_unicode�stripr* r r1 �append)r: �retr' r& r5 Z config_itemZfp_�locr0 �raw�pack�event�ind�fieldr% �_userr r r �beacon� sv � � � � � � � � ��,rW ) �__doc__rB �loggingr rF Zsalt.utils.beaconsr7 Zsalt.utils.filesZsalt.utils.stringutilsr r rH rJ �calcsizerD r2 � getLogger�__name__r Zdateutil.parser�parserr, r+ � ImportErrorr r" r* r1 r4 r; rW r r r r �<module> s8 \ � 2
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings