mirror of
https://github.com/aaPanel/aaPanel.git
synced 2026-08-17 21:25:47 +02:00
Jack
ed55fa708d
Since version 7.7.0, we recommend yours update python to 3.12. [+] Using nginx technology to load static files improves access speed [+] Refactor homepage, website, FTP, and database using vue3 [+] Table loading changed to skeleton screen [+] Add Website statistics-v2 professional plug-in [+] Add Home page - top 5 resource occupancy [+] Add protection for Files management (requires Tamper-proof for Enterprise 3.7) [+] Website, FTP, Databases page add program status [+] Add FTP log analysis (only supports Centos) [+] Add password-free login to phpMyAdmin [+] Add Proxy Project in Website (Supported when web service uses Nginx) [+] Add WP Toolkit (Pro version only) [+] Redesigned Docker module [+] Add WP Toolkit Protection [+] Add WP Toolkit Backup and Restore [+] Add WP Toolkit Migrated [+] Add WP Toolkit Clone site (supports new domain and subdomain) [+] Add WP Toolkit Create site from backup of other panel [+] Add WP Toolkit support for Cron automatic backup (only save Local disk) [+] Add WP Toolkit operation log [+] Add Integrity check for WP Toolkit [+] Add WP Toolkit plug-in management and themes management [*] Optimize phpMyAdmin formula access method [*] Optimize Home page PHP display problem [*] Optimize jump to the login interface after the login expires [*] Optimize automatic renewal of SSL at some times [*] Optimize Let's Encrypt to increase application success rate [-] Fix Logs Audit cannot be opened [-] Fix apache URL rewrite issue [-] Fix phpmyadmin installation problem [-] Fix the problem that some servers cannot install software [-] Fix upload file error [-] Fix left menu hiding problem [-] Fix aaPanel Mobile QR code display problem [-] Fix problem that third-party plug-ins are not displayed in the App Store [-] Fix issue where the menu bar is blank when opening new tabs [-] Fixed panel not being accessible in some cases [-] Fix the issue where Curl warning caused the inability to apply for SSL [-] Fix Quota issues for Website, FTP, Databases [-] Fix file interface display problem on mobile terminal
60 lines
2.3 KiB
Python
60 lines
2.3 KiB
Python
#!/usr/bin/python
|
|
# coding: utf-8
|
|
# -------------------------------------------------------------------
|
|
# aaPanel
|
|
# -------------------------------------------------------------------
|
|
# Copyright (c) 2015-2099 aaPanel(www.aapanel.com) All rights reserved.
|
|
# -------------------------------------------------------------------
|
|
# Author: lkq <lkq@aapanel.com>
|
|
# -------------------------------------------------------------------
|
|
# Time: 2022-08-10
|
|
# -------------------------------------------------------------------
|
|
# Docker API 未授权访问
|
|
# -------------------------------------------------------------------
|
|
# import sys, os
|
|
# os.chdir('/www/server/panel')
|
|
# sys.path.append("class/")
|
|
|
|
import public, os,requests
|
|
_title = 'Docker API unauthorized access'
|
|
_version = 1.0 # 版本
|
|
_ps = "Docker API unauthorized access" # 描述
|
|
_level = 3 # 风险级别： 1.提示(低) 2.警告(中) 3.危险(高)
|
|
_date = '2022-8-10' # 最后更新时间
|
|
_ignore = os.path.exists("data/warning/ignore/sw_docker_api.pl")
|
|
_tips = [
|
|
"Authentication should be turned on to authenticate or turn off the Docker Api"
|
|
]
|
|
_help = ''
|
|
_remind = "This solution fixes Docker's unauthorized access vulnerability, preventing attackers from using Docker to break into the server. We need to restrict API access to ensure that it does not affect the original website business operation. "
|
|
|
|
#
|
|
def get_local_ip():
|
|
'''获取内网IP'''
|
|
import socket
|
|
try:
|
|
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|
s.connect(('8.8.8.8', 80))
|
|
ip = s.getsockname()[0]
|
|
return ip
|
|
finally:
|
|
s.close()
|
|
return '127.0.0.1'
|
|
|
|
def check_run():
|
|
'''
|
|
@name 面板登录告警是否开启
|
|
@time 2022-08-12
|
|
@author lkq@aapanel.com
|
|
'''
|
|
try:
|
|
if os.path.exists("/lib/systemd/system/docker.service"):
|
|
data=public.ReadFile("/lib/systemd/system/docker.service")
|
|
if not data:return True, 'Risk-free'
|
|
if '-H tcp://' in data:
|
|
datas=requests.get("http://{}:2375/info".format(get_local_ip()),timeout=1)
|
|
datas.json()
|
|
if 'KernelVersion' in datas.text and 'RegistryConfig' in datas.text and 'DockerRootDir' in datas.text:
|
|
return False,"Unauthorized access to the Docker API"
|
|
return True, 'Risk-free'
|
|
except:return True,"Risk-free" |