OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	07/01/2022 06:30:50 AM	rwxr-xr-x
📄 __init__.py	0 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📁 __pycache__	-	07/01/2022 06:30:50 AM	rwxr-xr-x
📄 cc_apk_configure.py	5.56 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_apt_configure.py	31.87 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_apt_pipelining.py	2.63 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_bootcmd.py	2.69 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_byobu.py	3.49 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ca_certs.py	7.34 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_chef.py	13.62 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_debug.py	3.37 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_disable_ec2_metadata.py	1.85 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_disk_setup.py	32 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_fan.py	2.93 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_final_message.py	2.97 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_growpart.py	18.87 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_grub_dpkg.py	5.62 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_install_hotplug.py	3.64 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_keyboard.py	1.87 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_keys_to_console.py	3.45 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_landscape.py	4.67 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_locale.py	1.7 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_lxd.py	11.12 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_mcollective.py	6.01 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_migrator.py	3.34 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_mounts.py	19.33 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ntp.py	16.53 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_package_update_upgrade_install.py	4.13 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_phone_home.py	5.3 KB	06/15/2022 04:38:21 PM	rw-r--r--
📄 cc_power_state_change.py	7.47 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_puppet.py	12.86 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_refresh_rmc_and_interface.py	5.31 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_reset_rmc.py	4.36 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_resizefs.py	9.9 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_resolv_conf.py	4.5 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_rh_subscription.py	16.86 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_rightscale_userdata.py	4.05 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_rsyslog.py	9.58 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_runcmd.py	2.66 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_salt_minion.py	5.36 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_per_boot.py	1.5 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_per_instance.py	1.66 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_per_once.py	1.61 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_user.py	1.69 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_vendor.py	2.14 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_seed_random.py	4.64 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_set_hostname.py	4.45 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_set_passwords.py	10.17 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_snap.py	6.16 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_spacewalk.py	3.33 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ssh.py	13.88 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ssh_authkey_fingerprints.py	4.06 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ssh_import_id.py	5.63 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_timezone.py	1.25 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ubuntu_advantage.py	5.67 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ubuntu_drivers.py	4.63 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_update_etc_hosts.py	4.93 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_update_hostname.py	3.22 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_users_groups.py	7.43 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_write_files.py	6.46 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_write_files_deferred.py	1.46 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_yum_add_repo.py	6.92 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_zypper_add_repo.py	6.31 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 modules.py	10.57 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 schema.py	27.82 KB	06/15/2022 04:38:21 PM	rw-r--r--
📁 schemas	-	07/01/2022 06:30:50 AM	rwxr-xr-x

Name

Size

Modified

Perms

📁 ..

07/01/2022 06:30:50 AM

rwxr-xr-x

📄 __init__.py

0 bytes

05/18/2022 04:04:36 PM

rw-r--r--

📁 __pycache__

07/01/2022 06:30:50 AM

rwxr-xr-x

📄 cc_apk_configure.py

5.56 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_apt_configure.py

31.87 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_apt_pipelining.py

2.63 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_bootcmd.py

2.69 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_byobu.py

3.49 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_ca_certs.py

7.34 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_chef.py

13.62 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_debug.py

3.37 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_disable_ec2_metadata.py

1.85 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_disk_setup.py

32 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_fan.py

2.93 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_final_message.py

2.97 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_growpart.py

18.87 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_grub_dpkg.py

5.62 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_install_hotplug.py

3.64 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_keyboard.py

1.87 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_keys_to_console.py

3.45 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_landscape.py

4.67 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_locale.py

1.7 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_lxd.py

11.12 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_mcollective.py

6.01 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_migrator.py

3.34 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_mounts.py

19.33 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_ntp.py

16.53 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_package_update_upgrade_install.py

4.13 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_phone_home.py

5.3 KB

06/15/2022 04:38:21 PM

rw-r--r--

📄 cc_power_state_change.py

7.47 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_puppet.py

12.86 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_refresh_rmc_and_interface.py

5.31 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_reset_rmc.py

4.36 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_resizefs.py

9.9 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_resolv_conf.py

4.5 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_rh_subscription.py

16.86 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_rightscale_userdata.py

4.05 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_rsyslog.py

9.58 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_runcmd.py

2.66 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_salt_minion.py

5.36 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_scripts_per_boot.py

1.5 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_scripts_per_instance.py

1.66 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_scripts_per_once.py

1.61 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_scripts_user.py

1.69 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_scripts_vendor.py

2.14 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_seed_random.py

4.64 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_set_hostname.py

4.45 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_set_passwords.py

10.17 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_snap.py

6.16 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_spacewalk.py

3.33 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_ssh.py

13.88 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_ssh_authkey_fingerprints.py

4.06 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_ssh_import_id.py

5.63 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_timezone.py

1.25 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_ubuntu_advantage.py

5.67 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_ubuntu_drivers.py

4.63 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_update_etc_hosts.py

4.93 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_update_hostname.py

3.22 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_users_groups.py

7.43 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_write_files.py

6.46 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_write_files_deferred.py

1.46 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_yum_add_repo.py

6.92 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 cc_zypper_add_repo.py

6.31 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 modules.py

10.57 KB

05/18/2022 04:04:36 PM

rw-r--r--

📄 schema.py

27.82 KB

06/15/2022 04:38:21 PM

rw-r--r--

📁 schemas

07/01/2022 06:30:50 AM

rwxr-xr-x

Editing: cc_keys_to_console.py

# Copyright (C) 2011 Canonical Ltd.
# Copyright (C) 2012 Hewlett-Packard Development Company, L.P.
#
# Author: Scott Moser <scott.moser@canonical.com>
# Author: Juerg Haefliger <juerg.haefliger@hp.com>
#
# This file is part of cloud-init. See LICENSE file for license information.

"""Keys to Console: Control which SSH host keys may be written to console"""

import os
from textwrap import dedent

from cloudinit import subp, util
from cloudinit.config.schema import MetaSchema, get_meta_doc
from cloudinit.settings import PER_INSTANCE

# This is a tool that cloud init provides
HELPER_TOOL_TPL = "%s/cloud-init/write-ssh-key-fingerprints"

distros = ["all"]

meta: MetaSchema = {
    "id": "cc_keys_to_console",
    "name": "Keys to Console",
    "title": "Control which SSH host keys may be written to console",
    "description": (
        "For security reasons it may be desirable not to write SSH host keys"
        " and their fingerprints to the console. To avoid either being written"
        " to the console the ``emit_keys_to_console`` config key under the"
        " main ``ssh`` config key can be used. To avoid the fingerprint of"
        " types of SSH host keys being written to console the"
        " ``ssh_fp_console_blacklist`` config key can be used. By default,"
        " all types of keys will have their fingerprints written to console."
        " To avoid host keys of a key type being written to console the"
        "``ssh_key_console_blacklist`` config key can be used. By default,"
        " ``ssh-dss`` host keys are not written to console."
    ),
    "distros": distros,
    "examples": [
        dedent(
            """\
            # Do not print any SSH keys to system console
            ssh:
              emit_keys_to_console: false
            """
        ),
        dedent(
            """\
            # Do not print certain ssh key types to console
            ssh_key_console_blacklist: [dsa, ssh-dss]
            """
        ),
        dedent(
            """\
            # Do not print specific ssh key fingerprints to console
            ssh_fp_console_blacklist:
            - E25451E0221B5773DEBFF178ECDACB160995AA89
            - FE76292D55E8B28EE6DB2B34B2D8A784F8C0AAB0
            """
        ),
    ],
    "frequency": PER_INSTANCE,
}
__doc__ = get_meta_doc(meta)

def _get_helper_tool_path(distro):
    try:
        base_lib = distro.usr_lib_exec
    except AttributeError:
        base_lib = "/usr/lib"
    return HELPER_TOOL_TPL % base_lib

def handle(name, cfg, cloud, log, _args):
    if util.is_false(cfg.get("ssh", {}).get("emit_keys_to_console", True)):
        log.debug(
            "Skipping module named %s, logging of SSH host keys disabled", name
        )
        return

helper_path = _get_helper_tool_path(cloud.distro)
    if not os.path.exists(helper_path):
        log.warning(
            "Unable to activate module %s, helper tool not found at %s",
            name,
            helper_path,
        )
        return

fp_blacklist = util.get_cfg_option_list(
        cfg, "ssh_fp_console_blacklist", []
    )
    key_blacklist = util.get_cfg_option_list(
        cfg, "ssh_key_console_blacklist", ["ssh-dss"]
    )

try:
        cmd = [helper_path, ",".join(fp_blacklist), ",".join(key_blacklist)]
        (stdout, _stderr) = subp.subp(cmd)
        util.multi_log("%s\n" % (stdout.strip()), stderr=False, console=True)
    except Exception:
        log.warning("Writing keys to the system console failed!")
        raise

# vi: ts=4 expandtab