kemotaha/toolkit
1
0
Fork 0
forked from sig_core/toolkit
Code Pull Requests Activity

catch all category

Browse Source
This commit is contained in:
Louis Abel 2024-10-02 10:30:39 -07:00
parent 678c807741
commit dc53a5be9e
Signed by untrusted user: label
GPG Key ID: 2A6975660E424560
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
mangle/ipa/ipaauditor.py
View File

@ -465,6 +465,7 @@ class IPAAudit:
Does a recursive dig on a user Does a recursive dig on a user
""" """
hbac_rule_list = [] hbac_rule_list = []
hbac_rule_all_hosts = []
host_list = [] host_list = []
hostgroup_list = [] hostgroup_list = []
for group in groups: for group in groups:
@ -482,6 +483,8 @@ class IPAAudit:
hbac_results = IPAQuery.hbac_data(api, hbac) hbac_results = IPAQuery.hbac_data(api, hbac)
hbac_host_list = [] if not hbac_results.get('memberhost_host', None) else hbac_results['memberhost_host'] hbac_host_list = [] if not hbac_results.get('memberhost_host', None) else hbac_results['memberhost_host']
hbac_hostgroup_list = [] if not hbac_results.get('memberhost_hostgroup', None) else hbac_results['memberhost_hostgroup'] hbac_hostgroup_list = [] if not hbac_results.get('memberhost_hostgroup', None) else hbac_results['memberhost_hostgroup']
if hbac_results.get('servicecategory'):
hbac_rule_all_hosts.append(hbac)
for host in hbac_host_list: for host in hbac_host_list:
hbac_hosts.append(host) hbac_hosts.append(host)
@ -493,9 +496,14 @@ class IPAAudit:
new_hbac_hosts = sorted(set(hbac_hosts)) new_hbac_hosts = sorted(set(hbac_hosts))
print('User Has Access To These Hosts') print('User Has Access To These Hosts')
print('----------------------------------------') print('------------------------------------------')
for hhost in new_hbac_hosts: for hhost in new_hbac_hosts:
print(hhost) print(hhost)
if len(hbac_rule_all_hosts) > 0:
print('!! Notice: User has access to ALL hosts from the following rules:')
hbac_rule_all_hosts = sorted(set(hbac_rule_all_hosts))
for allrule in hbac_rule_all_hosts:
print(allrule)
@staticmethod @staticmethod
def group_deep_list(api, group): def group_deep_list(api, group):