adminmpmcz/patchcenter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

audit _run: detection sudo refused plus robuste (accent-insensitive, sudo:, no tty)

Browse Source
This commit is contained in:
Pierre & Lumière 2026-04-15 12:12:22 +02:00
parent 2f880da275
commit 2746188f1c
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
app/services/realtime_audit_service.py
View File

@ -245,9 +245,13 @@ def _run(client, cmd):
out = stdout.read().decode("utf-8", errors="replace").strip() out = stdout.read().decode("utf-8", errors="replace").strip()
err = stderr.read().decode("utf-8", errors="replace").strip() err = stderr.read().decode("utf-8", errors="replace").strip()
# Fallback sans sudo si sudoers refuse bash -c # Fallback sans sudo si sudoers refuse (detection robuste case/accent insensible)
if (not out) and err and ("pas autorisé" in err or "not allowed to execute" in err err_low = err.lower()
or "is not allowed" in err or "command not found" in err.lower()): sudo_refused = any(kw in err_low for kw in [
"pas autoris", "non autoris", "not allowed to execute",
"is not allowed", "no tty present", "sudo:",
])
if (not out) and err and sudo_refused:
_, stdout, stderr = client.exec_command(cmd, timeout=15) _, stdout, stderr = client.exec_command(cmd, timeout=15)
out = stdout.read().decode("utf-8", errors="replace").strip() out = stdout.read().decode("utf-8", errors="replace").strip()
err2 = stderr.read().decode("utf-8", errors="replace").strip() err2 = stderr.read().decode("utf-8", errors="replace").strip()