@panguard-ai/security-hardening 1.7.0 → 1.7.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -20,20 +20,20 @@ export declare const SecurityPolicySchema: z.ZodObject<{
|
|
|
20
20
|
syslogServer: z.ZodOptional<z.ZodString>;
|
|
21
21
|
syslogPort: z.ZodOptional<z.ZodNumber>;
|
|
22
22
|
}, "strip", z.ZodTypeAny, {
|
|
23
|
+
allowedOrigins: string[];
|
|
23
24
|
allowShellAccess: boolean;
|
|
24
25
|
allowedDirectories: string[];
|
|
25
26
|
allowedCommands: string[];
|
|
26
27
|
requireCsrfToken: boolean;
|
|
27
|
-
allowedOrigins: string[];
|
|
28
28
|
enableAuditLog: boolean;
|
|
29
29
|
syslogServer?: string | undefined;
|
|
30
30
|
syslogPort?: number | undefined;
|
|
31
31
|
}, {
|
|
32
|
+
allowedOrigins?: string[] | undefined;
|
|
32
33
|
allowShellAccess?: boolean | undefined;
|
|
33
34
|
allowedDirectories?: string[] | undefined;
|
|
34
35
|
allowedCommands?: string[] | undefined;
|
|
35
36
|
requireCsrfToken?: boolean | undefined;
|
|
36
|
-
allowedOrigins?: string[] | undefined;
|
|
37
37
|
enableAuditLog?: boolean | undefined;
|
|
38
38
|
syslogServer?: string | undefined;
|
|
39
39
|
syslogPort?: number | undefined;
|
package/dist/types.d.ts
CHANGED
|
@@ -56,6 +56,27 @@ export interface OriginConfig {
|
|
|
56
56
|
* 稽核事件操作類型
|
|
57
57
|
*/
|
|
58
58
|
export type AuditAction = 'websocket_connect' | 'credential_access' | 'credential_migrate' | 'file_access' | 'command_execution' | 'policy_check' | 'security_scan';
|
|
59
|
+
/**
|
|
60
|
+
* Forensic actor attribution (who/where produced the event).
|
|
61
|
+
* 鑑識歸屬：誰、在哪台機器產生此事件。
|
|
62
|
+
*
|
|
63
|
+
* Optional for back-compat. The local durable log carries the full value
|
|
64
|
+
* (including os username); export paths anonymize the username.
|
|
65
|
+
*/
|
|
66
|
+
export interface AuditActor {
|
|
67
|
+
/** OS username on the producing machine / 產生端機器的作業系統使用者名稱 */
|
|
68
|
+
user: string;
|
|
69
|
+
/** Hostname of the producing machine / 產生端機器的主機名稱 */
|
|
70
|
+
host: string;
|
|
71
|
+
/** Process id / 程序 id */
|
|
72
|
+
pid: number;
|
|
73
|
+
/** Agent identity when the event came from a guarded agent session */
|
|
74
|
+
agent?: {
|
|
75
|
+
platform: string;
|
|
76
|
+
sessionId: string;
|
|
77
|
+
agentId: string;
|
|
78
|
+
};
|
|
79
|
+
}
|
|
59
80
|
/**
|
|
60
81
|
* Audit event for security operations
|
|
61
82
|
* 安全操作的稽核事件
|
|
@@ -75,6 +96,15 @@ export interface AuditEvent {
|
|
|
75
96
|
module: string;
|
|
76
97
|
/** Additional context / 額外上下文 */
|
|
77
98
|
context?: Record<string, unknown>;
|
|
99
|
+
/** Forensic attribution (optional, back-compat) / 鑑識歸屬（選用，向後相容） */
|
|
100
|
+
actor?: AuditActor;
|
|
101
|
+
/** Correlates a decision across records (optional) / 跨記錄關聯的決策 id（選用） */
|
|
102
|
+
decisionId?: string;
|
|
103
|
+
/** Lifted rule identity for forensic indexing (optional) / 提升至頂層的規則身分（選用） */
|
|
104
|
+
rule?: {
|
|
105
|
+
id: string;
|
|
106
|
+
version?: string;
|
|
107
|
+
};
|
|
78
108
|
}
|
|
79
109
|
/**
|
|
80
110
|
* Credential store interface
|
package/dist/types.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,6CAA6C;IAC7C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oCAAoC;IACpC,cAAc,EAAE,OAAO,CAAC;IACxB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,IAAI,CAAC;IAChB,iCAAiC;IACjC,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2CAA2C;IAC3C,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GACpB,aAAa,GACb,mBAAmB,GACnB,cAAc,GACd,eAAe,CAAC;AAEpB;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,yBAAyB;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,6CAA6C;IAC7C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oCAAoC;IACpC,cAAc,EAAE,OAAO,CAAC;IACxB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,IAAI,CAAC;IAChB,iCAAiC;IACjC,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2CAA2C;IAC3C,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GACpB,aAAa,GACb,mBAAmB,GACnB,cAAc,GACd,eAAe,CAAC;AAEpB;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,yBAAyB;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,mEAAmE;IACnE,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,4BAA4B;IAC5B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D,4BAA4B;IAC5B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,+BAA+B;IAC/B,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,4CAA4C;IAC5C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,4BAA4B;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB"}
|