Documentation
¶
Index ¶
- Constants
- func CollectDuplicateUidGid() *payload.DuplicateUidGid
- func CollectHostSSH() (*payload.HostSSH, string)
- func CollectHostUsersSummary() (*payload.HostUsersSummary, string)
- func CollectPasswordPolicyFingerprint() *payload.PasswordPolicyFingerprint
- func CollectShadowAccountSummary() *payload.ShadowAccountSummary
- func CollectSudoersAudit() *payload.SudoersAudit
Constants ¶
View Source
const ModuleName = "identity_access_and_authentication"
ModuleName identifies this component module.
Variables ¶
This section is empty.
Functions ¶
func CollectDuplicateUidGid ¶
func CollectDuplicateUidGid() *payload.DuplicateUidGid
CollectDuplicateUidGid reports passwd/group IDs shared by more than one account (names capped).
func CollectHostSSH ¶
CollectHostSSH reads effective sshd settings from `sshd -T`.
func CollectHostUsersSummary ¶
func CollectHostUsersSummary() (*payload.HostUsersSummary, string)
CollectHostUsersSummary parses /etc/passwd for counts and a capped sample (no password material).
func CollectPasswordPolicyFingerprint ¶
func CollectPasswordPolicyFingerprint() *payload.PasswordPolicyFingerprint
CollectPasswordPolicyFingerprint reads pwquality.conf and PAM password stack lines (no secrets).
func CollectShadowAccountSummary ¶
func CollectShadowAccountSummary() *payload.ShadowAccountSummary
CollectShadowAccountSummary derives non-secret counts from /etc/shadow (no hash material).
func CollectSudoersAudit ¶
func CollectSudoersAudit() *payload.SudoersAudit
CollectSudoersAudit performs a structural sudoers scan without transmitting full rule bodies.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.