security(jd): add persona-only SSH closure actions
This commit is contained in:
parent
f86142b660
commit
7c3c8e9238
7 changed files with 80 additions and 1 deletions
|
|
@ -10,7 +10,7 @@
|
|||
{ "code": "JD-SEN-01", "name": "状态变化哨兵", "bind": "timer:15m", "owner": "systemd" },
|
||||
{ "code": "JD-ROUTE-01", "name": "已登记下游节点 SSH 路由", "bind": "private-keys", "owner": "root", "registered_targets": ["AW-GZ-001"] },
|
||||
{ "code": "JD-ACT-01", "name": "固定动作执行桥", "bind": "unix-socket", "owner": "root", "actions": ["inspect-services", "health-check", "inspect-code-channel-owner-auth"] },
|
||||
{ "code": "JD-OWNER-ACCESS-01", "name": "冰朔受限登录恢复执行器", "bind": "unix-socket", "owner": "root", "actions": ["restore-owner-password-login", "restore-code-channel-owner-login"], "action_meanings": { "restore-owner-password-login": "仅恢复京东服务器 SSH 密码认证开关,不修改代码频道账号", "restore-code-channel-owner-login": "仅将新代码频道 bingshuo 凭证恢复为旧第五域本机凭证,不读取明文密码" } },
|
||||
{ "code": "JD-OWNER-ACCESS-01", "name": "冰朔与人格体受限登录执行器", "bind": "unix-socket", "owner": "root", "actions": ["inspect-owner-ssh-login", "disable-owner-password-login", "restore-owner-password-login", "restore-code-channel-owner-login"], "action_meanings": { "inspect-owner-ssh-login": "只回读 SSH 有效认证配置,不显示密钥或密码", "disable-owner-password-login": "关闭 SSH 密码与交互式认证,保留人格体工单使用的受控机器密钥通道", "restore-owner-password-login": "仅恢复京东服务器 SSH 密码认证开关,不修改代码频道账号", "restore-code-channel-owner-login": "仅将新代码频道 bingshuo 凭证恢复为旧第五域本机凭证,不读取明文密码" } },
|
||||
{ "code": "JD-ARCH-PROVISION-01", "name": "已批准新架构首次安装器", "bind": "unix-socket", "owner": "root", "actions": ["provision-approved-architecture"], "state": "ACTIVE" },
|
||||
{ "code": "JD-LAN-01", "name": "光湖·来光者导航只读召回服务", "bind": "loopback:3924", "owner": "systemd", "architecture": "GLS-0231", "state": "DEPLOYED_AND_VERIFIED", "source_commit": "f4a4b5996c83b55d99172f3196f4a0d77ed5f3e9" },
|
||||
{
|
||||
|
|
|
|||
Loading…
Reference in a new issue