Round 471-475: SELinux, AppArmor, seccomp, capabilities, auditd, AIDE, OSSEC, Tripwire, fail2ban, CrowdSec, SSHGuard, DenyHosts, Lynis, OpenSCAP, CIS, Compliance, Vault, Conjur, Boundary, Teleport (100 commands)
ober
623be08e547d1f16e4afb155064500751b784197
--- a/docs/jemacs-vs-emacs.md +++ b/docs/jemacs-vs-emacs.md @@ -4583,6 +4583,131 @@ No remaining Tier 1 gaps. All core editing, completion, and navigation features | ebib-import-file | :orange_circle: | Import file into Ebib | | ebib-push-citation | :orange_circle: | Push Ebib citation to buffer | +### Round 475 — Vault ext2, Conjur ext, Boundary ext, Teleport ext2 + +| Feature | Emacs | jemacs | Status | +|---|---|---|---| +| Vault KV list | — | `vault-kv-list` | :orange_circle: Scaffolded | +| Vault KV get | — | `vault-kv-get` | :orange_circle: Scaffolded | +| Vault KV put | — | `vault-kv-put` | :orange_circle: Scaffolded | +| Vault KV delete | — | `vault-kv-delete` | :orange_circle: Scaffolded | +| Vault KV metadata | — | `vault-kv-metadata` | :orange_circle: Scaffolded | +| Conjur list | — | `conjur-list` | :orange_circle: Scaffolded | +| Conjur get | — | `conjur-get` | :orange_circle: Scaffolded | +| Conjur set | — | `conjur-set` | :orange_circle: Scaffolded | +| Conjur policy | — | `conjur-policy` | :orange_circle: Scaffolded | +| Conjur rotate | — | `conjur-rotate` | :orange_circle: Scaffolded | +| Boundary targets | — | `boundary-targets` | :orange_circle: Scaffolded | +| Boundary sessions | — | `boundary-sessions` | :orange_circle: Scaffolded | +| Boundary connect | — | `boundary-connect` | :orange_circle: Scaffolded | +| Boundary hosts | — | `boundary-hosts` | :orange_circle: Scaffolded | +| Boundary scopes | — | `boundary-scopes` | :orange_circle: Scaffolded | +| Teleport nodes | — | `teleport-nodes` | :orange_circle: Scaffolded | +| Teleport apps | — | `teleport-apps` | :orange_circle: Scaffolded | +| Teleport databases | — | `teleport-databases` | :orange_circle: Scaffolded | +| Teleport Kubernetes | — | `teleport-kube` | :orange_circle: Scaffolded | +| Teleport access | — | `teleport-access` | :orange_circle: Scaffolded | + +### Round 474 — Lynis ext, OpenSCAP ext, CIS-benchmark ext, Compliance ext + +| Feature | Emacs | jemacs | Status | +|---|---|---|---| +| Lynis audit | — | `lynis-audit` | :orange_circle: Scaffolded | +| Lynis show | — | `lynis-show` | :orange_circle: Scaffolded | +| Lynis upload | — | `lynis-upload` | :orange_circle: Scaffolded | +| Lynis update | — | `lynis-update` | :orange_circle: Scaffolded | +| Lynis pentest | — | `lynis-pentest` | :orange_circle: Scaffolded | +| OpenSCAP scan | — | `openscap-scan` | :orange_circle: Scaffolded | +| OpenSCAP OVAL | — | `openscap-oval` | :orange_circle: Scaffolded | +| OpenSCAP XCCDF | — | `openscap-xccdf` | :orange_circle: Scaffolded | +| OpenSCAP report | — | `openscap-report` | :orange_circle: Scaffolded | +| OpenSCAP remediate | — | `openscap-remediate` | :orange_circle: Scaffolded | +| CIS scan | — | `cis-scan` | :orange_circle: Scaffolded | +| CIS report | — | `cis-report` | :orange_circle: Scaffolded | +| CIS remediate | — | `cis-remediate` | :orange_circle: Scaffolded | +| CIS profile | — | `cis-profile` | :orange_circle: Scaffolded | +| CIS exceptions | — | `cis-exceptions` | :orange_circle: Scaffolded | +| Compliance scan | — | `compliance-scan` | :orange_circle: Scaffolded | +| Compliance report | — | `compliance-report` | :orange_circle: Scaffolded | +| Compliance baseline | — | `compliance-baseline` | :orange_circle: Scaffolded | +| Compliance exceptions | — | `compliance-exceptions` | :orange_circle: Scaffolded | +| Compliance drift | — | `compliance-drift` | :orange_circle: Scaffolded | + +### Round 473 — fail2ban ext, CrowdSec ext, SSHGuard ext, DenyHosts ext + +| Feature | Emacs | jemacs | Status | +|---|---|---|---| +| fail2ban status | — | `fail2ban-status` | :orange_circle: Scaffolded | +| fail2ban banned | — | `fail2ban-banned` | :orange_circle: Scaffolded | +| fail2ban unban | — | `fail2ban-unban` | :orange_circle: Scaffolded | +| fail2ban jails | — | `fail2ban-jails` | :orange_circle: Scaffolded | +| fail2ban log | — | `fail2ban-log` | :orange_circle: Scaffolded | +| CrowdSec decisions | — | `crowdsec-decisions` | :orange_circle: Scaffolded | +| CrowdSec alerts | — | `crowdsec-alerts` | :orange_circle: Scaffolded | +| CrowdSec bouncers | — | `crowdsec-bouncers` | :orange_circle: Scaffolded | +| CrowdSec collections | — | `crowdsec-collections` | :orange_circle: Scaffolded | +| CrowdSec hub | — | `crowdsec-hub` | :orange_circle: Scaffolded | +| SSHGuard status | — | `sshguard-status` | :orange_circle: Scaffolded | +| SSHGuard whitelist | — | `sshguard-whitelist` | :orange_circle: Scaffolded | +| SSHGuard blacklist | — | `sshguard-blacklist` | :orange_circle: Scaffolded | +| SSHGuard log | — | `sshguard-log` | :orange_circle: Scaffolded | +| SSHGuard config | — | `sshguard-config` | :orange_circle: Scaffolded | +| DenyHosts status | — | `denyhosts-status` | :orange_circle: Scaffolded | +| DenyHosts purge | — | `denyhosts-purge` | :orange_circle: Scaffolded | +| DenyHosts sync | — | `denyhosts-sync` | :orange_circle: Scaffolded | +| DenyHosts report | — | `denyhosts-report` | :orange_circle: Scaffolded | +| DenyHosts whitelist | — | `denyhosts-whitelist` | :orange_circle: Scaffolded | + +### Round 472 — auditd ext, AIDE ext, OSSEC ext, Tripwire ext + +| Feature | Emacs | jemacs | Status | +|---|---|---|---| +| auditd rules | — | `auditd-rules` | :orange_circle: Scaffolded | +| auditd status | — | `auditd-status` | :orange_circle: Scaffolded | +| auditd search | — | `auditd-search` | :orange_circle: Scaffolded | +| auditd report | — | `auditd-report` | :orange_circle: Scaffolded | +| auditd log | — | `auditd-log` | :orange_circle: Scaffolded | +| AIDE init | — | `aide-init` | :orange_circle: Scaffolded | +| AIDE check | — | `aide-check` | :orange_circle: Scaffolded | +| AIDE update | — | `aide-update` | :orange_circle: Scaffolded | +| AIDE compare | — | `aide-compare` | :orange_circle: Scaffolded | +| AIDE report | — | `aide-report` | :orange_circle: Scaffolded | +| OSSEC status | — | `ossec-status` | :orange_circle: Scaffolded | +| OSSEC agents | — | `ossec-agents` | :orange_circle: Scaffolded | +| OSSEC alerts | — | `ossec-alerts` | :orange_circle: Scaffolded | +| OSSEC rules | — | `ossec-rules` | :orange_circle: Scaffolded | +| OSSEC logs | — | `ossec-logs` | :orange_circle: Scaffolded | +| Tripwire init | — | `tripwire-init` | :orange_circle: Scaffolded | +| Tripwire check | — | `tripwire-check` | :orange_circle: Scaffolded | +| Tripwire update | — | `tripwire-update` | :orange_circle: Scaffolded | +| Tripwire report | — | `tripwire-report` | :orange_circle: Scaffolded | +| Tripwire policy | — | `tripwire-policy` | :orange_circle: Scaffolded | + +### Round 471 — SELinux ext, AppArmor ext, seccomp ext, capabilities ext + +| Feature | Emacs | jemacs | Status | +|---|---|---|---| +| SELinux status | — | `selinux-status` | :orange_circle: Scaffolded | +| SELinux context | — | `selinux-context` | :orange_circle: Scaffolded | +| SELinux booleans | — | `selinux-boolean` | :orange_circle: Scaffolded | +| SELinux modules | — | `selinux-module` | :orange_circle: Scaffolded | +| SELinux audit | — | `selinux-audit` | :orange_circle: Scaffolded | +| AppArmor status | — | `apparmor-status` | :orange_circle: Scaffolded | +| AppArmor enforce | — | `apparmor-enforce` | :orange_circle: Scaffolded | +| AppArmor complain | — | `apparmor-complain` | :orange_circle: Scaffolded | +| AppArmor profile | — | `apparmor-profile` | :orange_circle: Scaffolded | +| AppArmor logprof | — | `apparmor-logprof` | :orange_circle: Scaffolded | +| seccomp profile | — | `seccomp-profile` | :orange_circle: Scaffolded | +| seccomp list | — | `seccomp-list` | :orange_circle: Scaffolded | +| seccomp trace | — | `seccomp-trace` | :orange_circle: Scaffolded | +| seccomp whitelist | — | `seccomp-whitelist` | :orange_circle: Scaffolded | +| seccomp test | — | `seccomp-test` | :orange_circle: Scaffolded | +| capabilities list | — | `capabilities-list` | :orange_circle: Scaffolded | +| capabilities get | — | `capabilities-get` | :orange_circle: Scaffolded | +| capabilities set | — | `capabilities-set` | :orange_circle: Scaffolded | +| capabilities drop | — | `capabilities-drop` | :orange_circle: Scaffolded | +| capabilities ambient | — | `capabilities-ambient` | :orange_circle: Scaffolded | + ### Round 470 — dm-crypt ext, cryptsetup ext, LUKS ext, fscrypt ext | Feature | Emacs | jemacs | Status | --- a/src/jerboa-emacs/editor-extra-final.ss +++ b/src/jerboa-emacs/editor-extra-final.ss @@ -31158,3 +31158,291 @@ (echo-message! echo "fscrypt: metadata"))) ;; Milestone: Round 470 — 10,000+ commands! + +;; ── Round 472 — OSSEC ext, Tripwire ext ── + +(def (cmd-ossec-status app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OSSEC: status"))) + +(def (cmd-ossec-agents app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OSSEC: agents"))) + +(def (cmd-ossec-alerts app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OSSEC: alerts"))) + +(def (cmd-ossec-rules app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OSSEC: rules"))) + +(def (cmd-ossec-logs app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OSSEC: logs"))) + +(def (cmd-tripwire-init app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Tripwire: initialize"))) + +(def (cmd-tripwire-check app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Tripwire: integrity check"))) + +(def (cmd-tripwire-update app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Tripwire: update database"))) + +(def (cmd-tripwire-report app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Tripwire: report"))) + +(def (cmd-tripwire-policy app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Tripwire: policy"))) + +;; ── Round 473 — fail2ban ext, CrowdSec ext, SSHGuard ext, DenyHosts ext ── + +(def (cmd-fail2ban-status app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "fail2ban: status"))) + +(def (cmd-fail2ban-banned app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "fail2ban: banned IPs"))) + +(def (cmd-fail2ban-unban app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "fail2ban: unban IP"))) + +(def (cmd-fail2ban-jails app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "fail2ban: jails"))) + +(def (cmd-fail2ban-log app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "fail2ban: log"))) + +(def (cmd-crowdsec-decisions app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CrowdSec: decisions"))) + +(def (cmd-crowdsec-alerts app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CrowdSec: alerts"))) + +(def (cmd-crowdsec-bouncers app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CrowdSec: bouncers"))) + +(def (cmd-crowdsec-collections app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CrowdSec: collections"))) + +(def (cmd-crowdsec-hub app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CrowdSec: hub"))) + +(def (cmd-sshguard-status app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SSHGuard: status"))) + +(def (cmd-sshguard-whitelist app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SSHGuard: whitelist"))) + +(def (cmd-sshguard-blacklist app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SSHGuard: blacklist"))) + +(def (cmd-sshguard-log app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SSHGuard: log"))) + +(def (cmd-sshguard-config app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SSHGuard: configuration"))) + +(def (cmd-denyhosts-status app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "DenyHosts: status"))) + +(def (cmd-denyhosts-purge app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "DenyHosts: purge"))) + +(def (cmd-denyhosts-sync app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "DenyHosts: sync"))) + +(def (cmd-denyhosts-report app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "DenyHosts: report"))) + +(def (cmd-denyhosts-whitelist app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "DenyHosts: whitelist"))) + +;; ── Round 474 — Lynis ext, OpenSCAP ext, CIS-benchmark ext, Compliance ext ── + +(def (cmd-lynis-audit app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Lynis: system audit"))) + +(def (cmd-lynis-show app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Lynis: show details"))) + +(def (cmd-lynis-upload app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Lynis: upload report"))) + +(def (cmd-lynis-update app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Lynis: update"))) + +(def (cmd-lynis-pentest app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Lynis: pentest mode"))) + +(def (cmd-openscap-scan app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OpenSCAP: scan"))) + +(def (cmd-openscap-oval app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OpenSCAP: OVAL evaluation"))) + +(def (cmd-openscap-xccdf app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OpenSCAP: XCCDF evaluation"))) + +(def (cmd-openscap-report app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OpenSCAP: generate report"))) + +(def (cmd-openscap-remediate app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "OpenSCAP: remediate"))) + +(def (cmd-cis-scan app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CIS: benchmark scan"))) + +(def (cmd-cis-report app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CIS: report"))) + +(def (cmd-cis-remediate app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CIS: remediate"))) + +(def (cmd-cis-profile app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CIS: profile"))) + +(def (cmd-cis-exceptions app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "CIS: exceptions"))) + +(def (cmd-compliance-scan app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Compliance: scan"))) + +(def (cmd-compliance-report app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Compliance: report"))) + +(def (cmd-compliance-baseline app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Compliance: baseline"))) + +(def (cmd-compliance-exceptions app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Compliance: exceptions"))) + +(def (cmd-compliance-drift app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Compliance: drift detection"))) + +;; ── Round 475 — Vault ext2, Conjur ext, HashiCorp Boundary ext, Teleport ext2 ── + +(def (cmd-vault-kv-list app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Vault: KV list"))) + +(def (cmd-vault-kv-get app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Vault: KV get"))) + +(def (cmd-vault-kv-put app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Vault: KV put"))) + +(def (cmd-vault-kv-delete app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Vault: KV delete"))) + +(def (cmd-vault-kv-metadata app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Vault: KV metadata"))) + +(def (cmd-conjur-list app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Conjur: list resources"))) + +(def (cmd-conjur-get app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Conjur: get secret"))) + +(def (cmd-conjur-set app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Conjur: set secret"))) + +(def (cmd-conjur-policy app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Conjur: policy"))) + +(def (cmd-conjur-rotate app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Conjur: rotate secret"))) + +(def (cmd-boundary-targets app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Boundary: targets"))) + +(def (cmd-boundary-sessions app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Boundary: sessions"))) + +(def (cmd-boundary-connect app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Boundary: connect"))) + +(def (cmd-boundary-hosts app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Boundary: hosts"))) + +(def (cmd-boundary-scopes app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Boundary: scopes"))) + +(def (cmd-teleport-nodes app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Teleport: nodes"))) + +(def (cmd-teleport-apps app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Teleport: applications"))) + +(def (cmd-teleport-databases app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Teleport: databases"))) + +(def (cmd-teleport-kube app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Teleport: Kubernetes"))) + +(def (cmd-teleport-access app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "Teleport: access requests"))) --- a/src/jerboa-emacs/editor-extra-modes.ss +++ b/src/jerboa-emacs/editor-extra-modes.ss @@ -31030,3 +31030,129 @@ (def (cmd-localectl-keymap app) (let* ((echo (app-state-echo app))) (echo-message! echo "localectl: console keymap"))) + +;; ── Round 471 — SELinux ext, AppArmor ext, seccomp ext, capabilities ext ── + +(def (cmd-selinux-status app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SELinux: status"))) + +(def (cmd-selinux-context app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SELinux: security context"))) + +(def (cmd-selinux-boolean app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SELinux: booleans"))) + +(def (cmd-selinux-module app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SELinux: modules"))) + +(def (cmd-selinux-audit app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "SELinux: audit log"))) + +(def (cmd-apparmor-status app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AppArmor: status"))) + +(def (cmd-apparmor-enforce app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AppArmor: enforce profile"))) + +(def (cmd-apparmor-complain app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AppArmor: complain mode"))) + +(def (cmd-apparmor-profile app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AppArmor: profile"))) + +(def (cmd-apparmor-logprof app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AppArmor: log profiler"))) + +;; ── Round 472 — auditd ext, AIDE ext, OSSEC ext, Tripwire ext ── + +(def (cmd-seccomp-profile app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "seccomp: profile"))) + +(def (cmd-seccomp-list app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "seccomp: list syscalls"))) + +(def (cmd-seccomp-trace app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "seccomp: trace"))) + +(def (cmd-seccomp-whitelist app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "seccomp: whitelist"))) + +(def (cmd-seccomp-test app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "seccomp: test profile"))) + +(def (cmd-capabilities-list app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "capabilities: list"))) + +(def (cmd-capabilities-get app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "capabilities: get"))) + +(def (cmd-capabilities-set app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "capabilities: set"))) + +(def (cmd-capabilities-drop app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "capabilities: drop"))) + +(def (cmd-capabilities-ambient app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "capabilities: ambient"))) + +;; ── Round 473 — fail2ban ext, CrowdSec ext, SSHGuard ext, DenyHosts ext ── + +(def (cmd-auditd-rules app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "auditd: rules"))) + +(def (cmd-auditd-status app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "auditd: status"))) + +(def (cmd-auditd-search app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "auditd: search events"))) + +(def (cmd-auditd-report app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "auditd: report"))) + +(def (cmd-auditd-log app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "auditd: audit log"))) + +(def (cmd-aide-init app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AIDE: initialize database"))) + +(def (cmd-aide-check app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AIDE: check integrity"))) + +(def (cmd-aide-update app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AIDE: update database"))) + +(def (cmd-aide-compare app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AIDE: compare databases"))) + +(def (cmd-aide-report app) + (let* ((echo (app-state-echo app))) + (echo-message! echo "AIDE: report"))) --- a/src/jerboa-emacs/editor-extra-regs2.ss +++ b/src/jerboa-emacs/editor-extra-regs2.ss @@ -11464,4 +11464,115 @@ (register-command! 'fscrypt-lock cmd-fscrypt-lock) (register-command! 'fscrypt-status cmd-fscrypt-status) (register-command! 'fscrypt-metadata cmd-fscrypt-metadata) + + + ;; Round 471 — SELinux ext, AppArmor ext, seccomp ext, capabilities ext + (register-command! 'selinux-status cmd-selinux-status) + (register-command! 'selinux-context cmd-selinux-context) + (register-command! 'selinux-boolean cmd-selinux-boolean) + (register-command! 'selinux-module cmd-selinux-module) + (register-command! 'selinux-audit cmd-selinux-audit) + (register-command! 'apparmor-status cmd-apparmor-status) + (register-command! 'apparmor-enforce cmd-apparmor-enforce) + (register-command! 'apparmor-complain cmd-apparmor-complain) + (register-command! 'apparmor-profile cmd-apparmor-profile) + (register-command! 'apparmor-logprof cmd-apparmor-logprof) + (register-command! 'seccomp-profile cmd-seccomp-profile) + (register-command! 'seccomp-list cmd-seccomp-list) + (register-command! 'seccomp-trace cmd-seccomp-trace) + (register-command! 'seccomp-whitelist cmd-seccomp-whitelist) + (register-command! 'seccomp-test cmd-seccomp-test) + (register-command! 'capabilities-list cmd-capabilities-list) + (register-command! 'capabilities-get cmd-capabilities-get) + (register-command! 'capabilities-set cmd-capabilities-set) + (register-command! 'capabilities-drop cmd-capabilities-drop) + (register-command! 'capabilities-ambient cmd-capabilities-ambient) + + ;; Round 472 — auditd ext, AIDE ext, OSSEC ext, Tripwire ext + (register-command! 'auditd-rules cmd-auditd-rules) + (register-command! 'auditd-status cmd-auditd-status) + (register-command! 'auditd-search cmd-auditd-search) + (register-command! 'auditd-report cmd-auditd-report) + (register-command! 'auditd-log cmd-auditd-log) + (register-command! 'aide-init cmd-aide-init) + (register-command! 'aide-check cmd-aide-check) + (register-command! 'aide-update cmd-aide-update) + (register-command! 'aide-compare cmd-aide-compare) + (register-command! 'aide-report cmd-aide-report) + (register-command! 'ossec-status cmd-ossec-status) + (register-command! 'ossec-agents cmd-ossec-agents) + (register-command! 'ossec-alerts cmd-ossec-alerts) + (register-command! 'ossec-rules cmd-ossec-rules) + (register-command! 'ossec-logs cmd-ossec-logs) + (register-command! 'tripwire-init cmd-tripwire-init) + (register-command! 'tripwire-check cmd-tripwire-check) + (register-command! 'tripwire-update cmd-tripwire-update) + (register-command! 'tripwire-report cmd-tripwire-report) + (register-command! 'tripwire-policy cmd-tripwire-policy) + + ;; Round 473 — fail2ban ext, CrowdSec ext, SSHGuard ext, DenyHosts ext + (register-command! 'fail2ban-status cmd-fail2ban-status) + (register-command! 'fail2ban-banned cmd-fail2ban-banned) + (register-command! 'fail2ban-unban cmd-fail2ban-unban) + (register-command! 'fail2ban-jails cmd-fail2ban-jails) + (register-command! 'fail2ban-log cmd-fail2ban-log) + (register-command! 'crowdsec-decisions cmd-crowdsec-decisions) + (register-command! 'crowdsec-alerts cmd-crowdsec-alerts) + (register-command! 'crowdsec-bouncers cmd-crowdsec-bouncers) + (register-command! 'crowdsec-collections cmd-crowdsec-collections) + (register-command! 'crowdsec-hub cmd-crowdsec-hub) + (register-command! 'sshguard-status cmd-sshguard-status) + (register-command! 'sshguard-whitelist cmd-sshguard-whitelist) + (register-command! 'sshguard-blacklist cmd-sshguard-blacklist) + (register-command! 'sshguard-log cmd-sshguard-log) + (register-command! 'sshguard-config cmd-sshguard-config) + (register-command! 'denyhosts-status cmd-denyhosts-status) + (register-command! 'denyhosts-purge cmd-denyhosts-purge) + (register-command! 'denyhosts-sync cmd-denyhosts-sync) + (register-command! 'denyhosts-report cmd-denyhosts-report) + (register-command! 'denyhosts-whitelist cmd-denyhosts-whitelist) + + ;; Round 474 — Lynis ext, OpenSCAP ext, CIS-benchmark ext, Compliance ext + (register-command! 'lynis-audit cmd-lynis-audit) + (register-command! 'lynis-show cmd-lynis-show) + (register-command! 'lynis-upload cmd-lynis-upload) + (register-command! 'lynis-update cmd-lynis-update) + (register-command! 'lynis-pentest cmd-lynis-pentest) + (register-command! 'openscap-scan cmd-openscap-scan) + (register-command! 'openscap-oval cmd-openscap-oval) + (register-command! 'openscap-xccdf cmd-openscap-xccdf) + (register-command! 'openscap-report cmd-openscap-report) + (register-command! 'openscap-remediate cmd-openscap-remediate) + (register-command! 'cis-scan cmd-cis-scan) + (register-command! 'cis-report cmd-cis-report) + (register-command! 'cis-remediate cmd-cis-remediate) + (register-command! 'cis-profile cmd-cis-profile) + (register-command! 'cis-exceptions cmd-cis-exceptions) + (register-command! 'compliance-scan cmd-compliance-scan) + (register-command! 'compliance-report cmd-compliance-report) + (register-command! 'compliance-baseline cmd-compliance-baseline) + (register-command! 'compliance-exceptions cmd-compliance-exceptions) + (register-command! 'compliance-drift cmd-compliance-drift) + + ;; Round 475 — Vault ext2, Conjur ext, HashiCorp Boundary ext, Teleport ext2 + (register-command! 'vault-kv-list cmd-vault-kv-list) + (register-command! 'vault-kv-get cmd-vault-kv-get) + (register-command! 'vault-kv-put cmd-vault-kv-put) + (register-command! 'vault-kv-delete cmd-vault-kv-delete) + (register-command! 'vault-kv-metadata cmd-vault-kv-metadata) + (register-command! 'conjur-list cmd-conjur-list) + (register-command! 'conjur-get cmd-conjur-get) + (register-command! 'conjur-set cmd-conjur-set) + (register-command! 'conjur-policy cmd-conjur-policy) + (register-command! 'conjur-rotate cmd-conjur-rotate) + (register-command! 'boundary-targets cmd-boundary-targets) + (register-command! 'boundary-sessions cmd-boundary-sessions) + (register-command! 'boundary-connect cmd-boundary-connect) + (register-command! 'boundary-hosts cmd-boundary-hosts) + (register-command! 'boundary-scopes cmd-boundary-scopes) + (register-command! 'teleport-nodes cmd-teleport-nodes) + (register-command! 'teleport-apps cmd-teleport-apps) + (register-command! 'teleport-databases cmd-teleport-databases) + (register-command! 'teleport-kube cmd-teleport-kube) + (register-command! 'teleport-access cmd-teleport-access) )