first good one

This commit is contained in:
godot 2024-07-24 08:37:56 +02:00
parent ec0c627d13
commit 2279d5bfc2

View File

@ -16,14 +16,13 @@
// {"action": "accept", "src": ["*"], "dst": ["*:*"]}, // {"action": "accept", "src": ["*"], "dst": ["*:*"]},
// Random can // Random can
{"action": "accept", "src": ["tag:Random"], "dst": ["*:*"]}, {"action": "accept", "src": ["tag:Random"], "dst": ["*:*"]},
// Host can // Host can
{"action": "accept", "src": ["tag:Host"], "dst": ["tag:Service:*"]}, {"action": "accept", "src": ["tag:Host"], "dst": ["tag:Service:*"]},
// Hidden serves // Hidden serves
{"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]}, {"action": "accept", "src": ["*"], "dst": ["tag:Hidden:*"]},
], ],
// Define postures that will be applied to all rules without any specific // Define postures that will be applied to all rules without any specific
@ -57,22 +56,20 @@
{ {
"action": "accept", "action": "accept",
"src": ["tag:Random"], "src": ["tag:Random"],
"dst": ["autogroup:taged"], "dst": ["tag:Host", "tag:Service"],
"users": ["autogroup:nonroot", "root"], "users": ["autogroup:nonroot", "root"],
}, },
], ],
// Test access rules every time they're saved. // Test access rules every time they're saved.
"tests": [ "tests": [
{
"src": "tag:Bridge",
"accept": ["tag:Random:80"],
"deny": ["tag:Host:80"],
},
{ {
"src": "tag:Random", "src": "tag:Bridge",
"deny": ["tag:Host:80"],
},
{
"src": "tag:Random",
"accept": ["tag:Bridge:80", "tag:Host:80"], "accept": ["tag:Bridge:80", "tag:Host:80"],
}, },
], ],
} }