github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

fix: adhoc execute alert msg

pull/14342/head
wangruidong 2024-10-12 15:14:47 +08:00 committed by Bryan
parent 96eadf060c
commit 63824d3491
2 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
apps/ops/ansible/runner.py
View File

@ -39,9 +39,10 @@ class AdHocRunner:
def check_module(self): def check_module(self):
if self.module not in self.cmd_modules_choices: if self.module not in self.cmd_modules_choices:
return return
if self.module_args and self.module_args.split()[0] in settings.SECURITY_COMMAND_BLACKLIST: command = self.module_args
if command and set(command.split()).intersection(set(settings.SECURITY_COMMAND_BLACKLIST)):
raise CommandInBlackListException( raise CommandInBlackListException(
"Command is rejected by black list: {}".format(self.module_args.split()[0])) "Command is rejected by black list: {}".format(self.module_args))
def set_local_connection(self): def set_local_connection(self):
if self.job_module in self.need_local_connection_modules_choices: if self.job_module in self.need_local_connection_modules_choices:

10
apps/ops/models/job.py
View File

@ -478,6 +478,16 @@ class JobExecution(JMSOrgBaseModel):
for acl in acls: for acl in acls:
if self.match_command_group(acl, asset): if self.match_command_group(acl, asset):
break break
command = self.current_job.args
if command and set(command.split()).intersection(set(settings.SECURITY_COMMAND_BLACKLIST)):
CommandExecutionAlert({
"assets": self.current_job.assets.all(),
"input": self.material,
"risk_level": RiskLevelChoices.reject,
"user": self.creator,
}).publish_async()
raise CommandInBlackListException(
"Command is rejected by black list: {}".format(self.current_job.args))
def check_danger_keywords(self): def check_danger_keywords(self):
lines = self.job.playbook.check_dangerous_keywords() lines = self.job.playbook.check_dangerous_keywords()