ssh_scan 0.0.12.beta.1 → 0.0.12.beta.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: db37ffc4056dbcf7dfaabd52571817fe411e20a2
-  data.tar.gz: a27d171b9de280db15dd44975f5d16ae15b95e86
+  metadata.gz: 7f118d5f4b8fd7336207b24592496e2e80e62d26
+  data.tar.gz: fedf6dc4193c8592c9ee128c1a4a7e058b1c82c9
 SHA512:
-  metadata.gz: ce75bf0d9d4c5d6002630523a08902237ea2060bfe22a1904806553789bc869ec8286037cffa5c8f35504d60eeb98a46b363a9dcc910bd783aa7404e01c77bec
-  data.tar.gz: 5b107fab0384957b523ccbdca9f6406fb002728111277a713fa8c5a81767af66948965ad7ec4bea8137850868e2089f80220fcf3b9235bd01635fa8af13140fd
+  metadata.gz: fa614b3fada0296c6201dd4d1f225da156300bfedf4f1ddfbbbeeb03a89f4d15d27eae71f61b00b5d5363101fcfc7a5c4ddf59c2a1e74847b2823df95e9b0912
+  data.tar.gz: b88c3d0c431428cedff332e953a4ca692026354e24f8cca24d25d940cd35fddf134c719988c3a7745c9190bb795717ff2b5d9cd706c7f749b84fc690c36c3df4

data/.travis.yml

@@ -2,8 +2,37 @@ language: ruby
 matrix:
   include:
   - rvm: ruby-head
+    env:
+      - LABEL=unit_tests
   - rvm: 2.3.0
+    env:
+      - LABEL=unit_tests
+  - rvm: 2.2.0
+    env:
+      - LABEL=unit_tests
+  - rvm: 2.1.3
+    env:
+      - LABEL=unit_tests
+  - rvm: 2.0.0
+    env:
+      - LABEL=unit_tests
+  - rvm: 2.3.0
+    env:
+      - LABEL=gem_integration_tests
+    script:
+      - gem install ssh_scan
+      - chmod 755 ./spec/ssh_scan/integration.sh
+      - ./spec/ssh_scan/integration.sh
+  - rvm: 2.3.0
+    env:
+      - LABEL=src_integration_tests
+    script:
+      - bundle install
+      - chmod 755 ./spec/ssh_scan/integration.sh
+      - ./spec/ssh_scan/integration.sh
   - rvm: 2.3.0
+    env:
+      - LABEL=docker_build_push
     services:
       - docker
     script:
@@ -15,13 +44,3 @@ matrix:
           else \
             exit 0 ;\
           fi
-  - rvm: 2.3.0
-    script:
-      - gem install ssh_scan
-  - rvm: 2.3.0
-    script:
-      - chmod 755 ./spec/ssh_scan/integration.sh
-      - ./spec/ssh_scan/integration.sh
-  - rvm: 2.2.0
-  - rvm: 2.1.3
-  - rvm: 2.0.0

data/lib/ssh_scan.rb

@@ -1,5 +1,7 @@
 #External Deps
 require 'bindata'
+require 'timeout'
+require 'resolv'
 
 #Internal Deps
 require 'ssh_scan/version'

data/lib/ssh_scan/policy.rb

@@ -2,7 +2,7 @@ require 'yaml'
 
 module SSHScan
   class Policy
-    attr_reader :name, :kex, :macs, :encryption, :compression, :references
+    attr_reader :name, :kex, :macs, :encryption, :compression, :references, :auth_methods
 
     def initialize(opts = {})
       @name = opts['name'] || []
@@ -11,6 +11,7 @@ module SSHScan
       @encryption = opts['encryption'] || []
       @compression = opts['compression'] || []
       @references = opts['references'] || []
+      @auth_methods = opts['auth_methods'] || []
     end
 
     def self.from_file(file)

data/lib/ssh_scan/policy_manager.rb

@@ -88,6 +88,20 @@ module SSHScan
       return outliers
     end
 
+    def out_of_policy_auth_methods
+      target_auth_methods = @result["auth_methods"]
+      outliers = []
+
+      if not @policy.auth_methods.empty?
+        target_auth_methods.each do |auth_method|
+          if not @policy.auth_methods.include?(auth_method)
+            outliers << auth_method
+          end
+        end
+      end
+      return outliers
+    end
+
     def compliant?
       out_of_policy_encryption.empty? &&
       out_of_policy_macs.empty? &&
@@ -96,7 +110,8 @@ module SSHScan
       missing_policy_encryption.empty? &&
       missing_policy_macs.empty? &&
       missing_policy_kex.empty? &&
-      missing_policy_compression.empty?
+      missing_policy_compression.empty? &&
+      out_of_policy_auth_methods.empty?
     end
 
     def recommendations
@@ -113,6 +128,7 @@ module SSHScan
       recommendations << "Remove these MAC Algos: #{out_of_policy_macs.join(", ")}" unless out_of_policy_macs.empty?
       recommendations << "Remove these Encryption Ciphers: #{out_of_policy_encryption.join(", ")}" unless out_of_policy_encryption.empty?
       recommendations << "Remove these Compression Algos: #{out_of_policy_compression.join(", ")}" unless out_of_policy_compression.empty?
+      recommendations << "Remove these Authentication Methods: #{out_of_policy_auth_methods.join(", ")}" unless out_of_policy_auth_methods.empty?
       return recommendations
     end
 

data/lib/ssh_scan/version.rb

@@ -1,3 +1,3 @@
 module SSHScan
-  VERSION = '0.0.12.beta.1'
+  VERSION = '0.0.12.beta.2'
 end

data/policies/mozilla_intermediate.yml

@@ -1,5 +1,7 @@
 ---
 name: Mozilla Intermediate
+auth_methods:
+- publickey
 kex:
 - diffie-hellman-group-exchange-sha256
 encryption:

data/policies/mozilla_modern.yml

@@ -1,5 +1,7 @@
 ---
 name: Mozilla Modern
+auth_methods:
+- publickey
 kex:
 - curve25519-sha256@libssh.org
 - ecdh-sha2-nistp521

data/ssh_scan.gemspec

@@ -27,10 +27,8 @@ Gem::Specification.new do |s|
   s.homepage = 'http://rubygems.org/gems/ssh_scan'
 
   s.add_dependency('bindata', '~> 2.0')
-  s.add_dependency('net-ssh')
   s.add_dependency('netaddr')
-  s.add_dependency('timeout')
-  s.add_dependency('json')
+  s.add_dependency('net-ssh')
   s.add_development_dependency('pry')
   s.add_development_dependency('rspec', '~> 3.0')
   s.add_development_dependency('rspec-its', '~> 1.2')

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ssh_scan
 version: !ruby/object:Gem::Version
-  version: 0.0.12.beta.1
+  version: 0.0.12.beta.2
 platform: ruby
 authors:
 - Jonathan Claudius
@@ -25,20 +25,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
-- !ruby/object:Gem::Dependency
-  name: net-ssh
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
 - !ruby/object:Gem::Dependency
   name: netaddr
   requirement: !ruby/object:Gem::Requirement
@@ -54,21 +40,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: timeout
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: json
+  name: net-ssh
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="