CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 10:12:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Check for IP environment variable in so-allow and so-deny

Browse Source
This commit is contained in:
William Wernert
2021-10-21 13:54:06 -04:00
parent 15fe7512b7
commit f374dcbb58
2 changed files with 36 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
salt/common/tools/sbin/so-allow
View File

@@ -183,21 +183,25 @@ def main():
return_code = e.errno return_code = e.errno
sys.exit(return_code) sys.exit(return_code)
elif args.roles is not None and args.ip is None: elif args.roles is not None and args.ip is None:
main_parser.print_help() if os.environ.get('IP') is None:
else: main_parser.print_help()
if validate_ip_cidr(args.ip): sys.exit(1)
try:
for role in args.roles:
return_code = apply(role, args.ip)
if return_code > 0:
break
except Exception as e:
print(f'Unexpected exception occurred: {e}', file=sys.stderr)
return_code = e.errno
else: else:
print(f'Invalid IP address or CIDR block \'{args.ip}\', please try again.', file=sys.stderr) args.ip = os.environ['IP']
return_code = 1
if validate_ip_cidr(args.ip):
try:
for role in args.roles:
return_code = apply(role, args.ip)
if return_code > 0:
break
except Exception as e:
print(f'Unexpected exception occurred: {e}', file=sys.stderr)
return_code = e.errno
else:
print(f'Invalid IP address or CIDR block \'{args.ip}\', please try again.', file=sys.stderr)
return_code = 1
sys.exit(return_code) sys.exit(return_code)

32
salt/common/tools/sbin/so-deny
View File

@@ -184,21 +184,25 @@ def main():
return_code = e.errno return_code = e.errno
sys.exit(return_code) sys.exit(return_code)
elif args.roles is not None and args.ip is None: elif args.roles is not None and args.ip is None:
main_parser.print_help() if os.environ.get('IP') is None:
else: main_parser.print_help()
if validate_ip_cidr(args.ip): sys.exit(1)
try:
for role in args.roles:
return_code = apply(role, args.ip)
if return_code > 0:
break
except Exception as e:
print(f'Unexpected exception occurred: {e}', file=sys.stderr)
return_code = e.errno
else: else:
print(f'Invalid IP address or CIDR block \'{args.ip}\', please try again.', file=sys.stderr) args.ip = os.environ['IP']
return_code = 1
if validate_ip_cidr(args.ip):
try:
for role in args.roles:
return_code = apply(role, args.ip)
if return_code > 0:
break
except Exception as e:
print(f'Unexpected exception occurred: {e}', file=sys.stderr)
return_code = e.errno
else:
print(f'Invalid IP address or CIDR block \'{args.ip}\', please try again.', file=sys.stderr)
return_code = 1
sys.exit(return_code) sys.exit(return_code)