Documentation
¶
Index ¶
- Constants
- func CollectDuplicateUidGid(ctx context.Context) *payload.DuplicateUidGid
- func CollectHostSSH(ctx context.Context) *payload.HostSSH
- func CollectHostUsersSummary(ctx context.Context) *payload.HostUsersSummary
- func CollectPasswordPolicyFingerprint(ctx context.Context) *payload.PasswordPolicyFingerprint
- func CollectShadowAccountSummary(ctx context.Context) *payload.ShadowAccountSummary
- func CollectSudoersAudit(ctx context.Context) *payload.SudoersAudit
- func ShadowSummaryJSON() ([]byte, error)
- func SudoersAuditJSON() ([]byte, error)
Constants ¶
const ModuleName = "identity_access_and_authentication"
ModuleName identifies this component module.
Variables ¶
This section is empty.
Functions ¶
func CollectDuplicateUidGid ¶
func CollectDuplicateUidGid(ctx context.Context) *payload.DuplicateUidGid
CollectDuplicateUidGid reports passwd/group IDs shared by more than one account (names capped).
func CollectHostSSH ¶
CollectHostSSH reads effective sshd settings from `sshd -T`.
func CollectHostUsersSummary ¶
func CollectHostUsersSummary(ctx context.Context) *payload.HostUsersSummary
CollectHostUsersSummary parses /etc/passwd for counts and a capped sample (no password material).
func CollectPasswordPolicyFingerprint ¶
func CollectPasswordPolicyFingerprint(ctx context.Context) *payload.PasswordPolicyFingerprint
CollectPasswordPolicyFingerprint reads pwquality.conf and PAM password stack lines (no secrets).
func CollectShadowAccountSummary ¶
func CollectShadowAccountSummary(ctx context.Context) *payload.ShadowAccountSummary
CollectShadowAccountSummary derives non-secret counts from /etc/shadow (no hash material).
func CollectSudoersAudit ¶
func CollectSudoersAudit(ctx context.Context) *payload.SudoersAudit
CollectSudoersAudit performs a structural sudoers scan without transmitting full rule bodies.
func ShadowSummaryJSON ¶ added in v0.54.1
ShadowSummaryJSON renders the summary from the file itself. Only root can do this, and only the scan running as root ever calls it.
func SudoersAuditJSON ¶ added in v0.54.1
SudoersAuditJSON renders the audit from the files themselves. Only root can do this, and only the scan running as root ever calls it.
Types ¶
This section is empty.
Source Files