o O6uf @s>ddlZddlmZddlmZmZmZGdddeeZdS)Nglob)PluginIndependentPlugin PluginOptc@sBeZdZdZdZdZeddeddgZdd Z d d Z d d Z dS)SshzSecure shell servicessh)servicessecuritysystemidentity userconfsTz5Changes whether module will collect user .ssh configs)defaultval_typedesccCsF|dddgd}|||||dr!|dSdS)N sshd_config ssh_config)z/etc/ssh/sshd_config$z/etc/ssh/ssh_config$)z/etc/ssh/ssh_configz/etc/ssh/sshd_configz/etc/ssh/sshd_config.d/*r ) add_file_tags add_copy_specincluded_configs get_optionuser_ssh_files_permissions)selfsshcfgsr8/usr/lib/python3/dist-packages/sos/report/plugins/ssh.pysetups    z Ssh.setupc Csz\dddd|DD}|D]J}|dd}t||ddd/}|D]$}t|d ks4|d r5q%|d rI|}|j|d |d q%Wdn1sTwYqWdStyfYdSw)z Include subconfig files cSsg|] }|D]}|qqSrr).0filesfrrr 7sz(Ssh.included_configs..cSsg|]}t|ddqS)T) recursiver)rcopyspecrrrr 8s /rzUTF-8)encodingr#include)tagsN)splitopen path_joinlen startswithlowerr Exception)rrcfgfilessshcfgtagcfgfilelineconfargrrrr3s4  zSsh.included_configscCs>t}|D]}||jd}||r|d|qdS)z Iterate over .ssh folders in user homes to see their permissions. Bad permissions can prevent SSH from allowing access to given user. z.sshzls -laZ N)pwdgetpwallr-pw_dir path_isdiradd_cmd_output)r users_datauserhome_dirrrrrKs zSsh.user_ssh_files_permissionsN) __name__ __module__ __qualname__ short_desc plugin_nameprofilesrstr option_listrrrrrrrrs r)r8rsos.report.pluginsrrrrrrrrs