Source: factory.core/extend.security/ObjSecurityLocal.py
Local OS security scanner.
Each scan_*() method returns a list of
finding dicts with: category, severity,
description, detail.
...
| Method | Signature | Description |
|---|---|---|
| scan_all | scan_all() -> List[Dict[str, Any]] |
Run all local security checks. |
| scan_fail2ban | scan_fail2ban() -> List[Dict[str, Any]] |
Check fail2ban for active bans. |
| scan_ssh_keys | scan_ssh_keys() -> List[Dict[str, Any]] |
Check authorized_keys permissions |
| scan_world_writable | scan_world_writable() -> List[Dict[str, Any]] |
Find world-writable files in critical |
| scan_sshd_config | scan_sshd_config() -> List[Dict[str, Any]] |
Check sshd_config for risky settings. |
| scan_unattended_upgrades | scan_unattended_upgrades() -> List[Dict[str, Any]] |
Check if unattended-upgrades is |
| scan_network_connections | scan_network_connections() -> Dict[str, Any] |
Count network connections by state. |
| scan_open_fds | scan_open_fds() -> Dict[str, Any] |
Check open file descriptor usage. |
| scan_swap_pressure | scan_swap_pressure() -> Dict[str, Any] |
Monitor swap usage and page rates. |
| scan_log_anomalies | scan_log_anomalies(limit: int = 500) -> List[Dict[str, Any]] |
Scan syslog for OOM kills, panics, |