improve

2026-01-04 13:49:12 +00:00 · 2023-05-25 14:27:17 +02:00
parent 7e7738ab98
commit 78c932f1af
1 changed files with 9 additions and 0 deletions
--- a/build_lists/sensitive_files.yaml
+++ b/build_lists/sensitive_files.yaml
@@ -1141,6 +1141,15 @@ search:
          - name: "authorized_keys"
            value: 
                good_regex: 'from=[\w\._\-]+'
+                bad_regex: "command=.*"
+                type: f
+                search_in: 
+                  - common
+          
+          - name: "*.pub"
+            value:
+                bad_regex: "command=.*"
+                only_bad_lines: True
                type: f
                search_in: 
                  - common