saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-17 10:10:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add note about log messages to hardening salt docs

Browse source
This commit is contained in:
Daniel A. Wozniak 2020-04-13 07:01:07 +00:00 • committed by Daniel Wozniak
parent d5801df94b
commit de8c777be6
2 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/topics/hardening.rst
View file

@ -71,6 +71,10 @@ Salt hardening tips
particularly sensitive minions. There is also :ref:`salt-ssh` or the
:mod:`modules.sudo <salt.modules.sudo>` if you need to further restrict
a minion.
- Monitor specific security releated log messages. Salt ``salt-master`` logs
attempts to access methods which are not exposed to network clients. These log
messages are logged at the ``error`` log level and start with ``Requested
method not exposed``.
.. _salt-users: https://groups.google.com/forum/#!forum/salt-users
.. _salt-announce: https://groups.google.com/forum/#!forum/salt-announce

2
salt/master.py
View file

@ -1217,7 +1217,7 @@ class TransportMethods(object):
try:
return getattr(self, name)
except AttributeError:
log.error("Expose method not found: %s", name)
log.error("Requested method not exposed: %s", name)
else:
log.error("Requested method not exposed: %s", name)