Added positive matcher to avoid false positive result. (#4517)

2022-05-31 20:13:08 +05:30 · 2022-05-31 20:13:08 +05:30 · e62a23690d
parent 73b4295011
commit e62a23690d
8 changed files with 32 additions and 0 deletions
--- a/file/audit/cisco/configure-aaa-service.yaml
+++ b/file/audit/cisco/configure-aaa-service.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "aaa new-model"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"
--- a/file/audit/cisco/configure-service-timestamps-debug.yaml
+++ b/file/audit/cisco/configure-service-timestamps-debug.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "service timestamps debug datetime msec show-timezone localtime"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"
--- a/file/audit/cisco/configure-service-timestamps-logmessages.yaml
+++ b/file/audit/cisco/configure-service-timestamps-logmessages.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "service timestamps log datetime msec show-timezone localtime"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"
--- a/file/audit/cisco/disable-ip-source-route.yaml
+++ b/file/audit/cisco/disable-ip-source-route.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "no ip source-route"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"
--- a/file/audit/cisco/disable-pad-service.yaml
+++ b/file/audit/cisco/disable-pad-service.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "no service pad"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"
--- a/file/audit/cisco/enable-secret-for-password-user-and-.yaml
+++ b/file/audit/cisco/enable-secret-for-password-user-and-.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "enable secret"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"
--- a/file/audit/cisco/logging-enable.yaml
+++ b/file/audit/cisco/logging-enable.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "logging enable"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"
--- a/file/audit/cisco/set-and-secure-passwords.yaml
+++ b/file/audit/cisco/set-and-secure-passwords.yaml
@ -20,3 +20,7 @@ file:
        words:
          - "service password-encryption"
        negative: true
+
+      - type: word
+        words:
+          - "configure terminal"