New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature #1193

Open

conghua1013 opened this issue Jan 13, 2023 · 0 comments

Assignees

Labels

feature

conghua1013 commented Jan 13, 2023

现存什么问题没有很好被解决
目前瓦力通过免密登录的方式进行宿主机与目标机直接进行维护,存在一定的安全风险.
当宿主机通过各种非法手段主机权限被突破后,通过宿主机,非法人员将可以完全无障碍的控制目标主机,(即便目标主机免密用户未非root,目标主机上的业务系统也会面临非法访问风险)

我希望walle提供这样的功能
建议增加ssh 用户名/密码或者导入安全证书方式访问目标主机, 目标主机的用户名/密码或证书机密存储与walle.
可以减低目标主机面临的风险

conghua1013 added the feature label

conghua1013 assigned meolu

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment