first good one
This commit is contained in:
parent
ec0c627d13
commit
2279d5bfc2
@ -23,7 +23,6 @@
|
|||||||
|
|
||||||
// Hidden serves
|
// Hidden serves
|
||||||
{"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]},
|
{"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]},
|
||||||
|
|
||||||
],
|
],
|
||||||
|
|
||||||
// Define postures that will be applied to all rules without any specific
|
// Define postures that will be applied to all rules without any specific
|
||||||
@ -57,22 +56,20 @@
|
|||||||
{
|
{
|
||||||
"action": "accept",
|
"action": "accept",
|
||||||
"src": ["tag:Random"],
|
"src": ["tag:Random"],
|
||||||
"dst": ["autogroup:taged"],
|
"dst": ["tag:Host", "tag:Service"],
|
||||||
"users": ["autogroup:nonroot", "root"],
|
"users": ["autogroup:nonroot", "root"],
|
||||||
},
|
},
|
||||||
],
|
],
|
||||||
|
|
||||||
// Test access rules every time they're saved.
|
// Test access rules every time they're saved.
|
||||||
"tests": [
|
"tests": [
|
||||||
{
|
|
||||||
"src": "tag:Bridge",
|
|
||||||
"accept": ["tag:Random:80"],
|
|
||||||
"deny": ["tag:Host:80"],
|
|
||||||
},
|
|
||||||
{
|
{
|
||||||
"src": "tag:Random",
|
"src": "tag:Bridge",
|
||||||
|
"deny": ["tag:Host:80"],
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"src": "tag:Random",
|
||||||
"accept": ["tag:Bridge:80", "tag:Host:80"],
|
"accept": ["tag:Bridge:80", "tag:Host:80"],
|
||||||
},
|
},
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user