python/jc
1
0
Fork 0
mirror of https://github.com/kellyjonbrazil/jc.git synced 2025-06-21 00:19:42 +02:00
Code Issues Releases Activity

ignore Match blocks

Browse Source
This commit is contained in:
Kelly Brazil
2022-10-28 16:36:52 -07:00
parent a27110ebe5
commit d7cfa38eee
2 changed files with 33 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
jc/parsers/sshd_conf.py
View File

@ -169,6 +169,8 @@ def parse(
modifiers: Set[str] = {'+', '-', '^'} modifiers: Set[str] = {'+', '-', '^'}
match_block_found = False
if jc.utils.has_data(data): if jc.utils.has_data(data):
for line in filter(None, data.splitlines()): for line in filter(None, data.splitlines()):
@ -176,7 +178,21 @@ def parse(
if line.strip().startswith('#'): if line.strip().startswith('#'):
continue continue
# support configuration file by ignoring all lines between
# Match xxx and Match any
if line.strip().startswith('Match all'):
match_block_found = False
continue
if line.strip().startswith('Match'):
match_block_found = True
continue
if match_block_found:
continue
key, val = line.split(maxsplit=1) key, val = line.split(maxsplit=1)
# support configuration file by converting to lower case # support configuration file by converting to lower case
key = key.lower() key = key.lower()

21
tests/fixtures/generic/sshd_config vendored
View File

@ -14,14 +14,27 @@
# SELinux about this change. # SELinux about this change.
# semanage port -a -t ssh_port_t -p tcp #PORTNUMBER # semanage port -a -t ssh_port_t -p tcp #PORTNUMBER
# #
#Port 22 Port 22
#AddressFamily any AddressFamily any
#ListenAddress 0.0.0.0 ListenAddress 0.0.0.0
#ListenAddress :: ListenAddress ::
Match group chroot
this should be ignored
this line too should be ignored
keep ignoring
Match all
HostKey /etc/ssh/ssh_host_rsa_key HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_dsa_key #HostKey /etc/ssh/ssh_host_dsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key HostKey /etc/ssh/ssh_host_ecdsa_key
Match group anything
ignore this
don't look at this
Match all
HostKey /etc/ssh/ssh_host_ed25519_key HostKey /etc/ssh/ssh_host_ed25519_key
# Ciphers and keying # Ciphers and keying