36 lines
630 B
YAML
36 lines
630 B
YAML
git_permission_watchdog:
|
|
enabled: true
|
|
priority: P0
|
|
workspace: /data/aios-gitops/workspace
|
|
|
|
expected_identity:
|
|
user: aiman
|
|
group: gitops
|
|
|
|
checks:
|
|
- object_owner
|
|
- object_group
|
|
- object_write_permission
|
|
- git_write_probe
|
|
|
|
repair:
|
|
enabled: true
|
|
allowed_paths:
|
|
- .git/objects
|
|
forbidden:
|
|
- chmod_777
|
|
- system_wide_permission_change
|
|
|
|
runtime:
|
|
interval_minutes: 5
|
|
create_task_on_drift: true
|
|
send_notification_on_failure: true
|
|
|
|
audit:
|
|
enabled: true
|
|
record:
|
|
- detection_time
|
|
- affected_paths
|
|
- repair_action
|
|
- repair_result
|