2.2 KiB
2.2 KiB
Сводный отчёт nginx PMI stand
Дата прогона: 2026-06-14_06-37-41
Стенд: Docker Compose (results/docker-compose.yml)
Результаты ПМИ
| Метрика | Значение |
|---|---|
| PASS | 23 |
| FAIL | 0 |
Целостность (FIM stand-in)
| Метрика | Значение |
|---|---|
| PASS | 4 |
| FAIL | 0 |
FIM выполнен через SHA256 baseline (
run-fim-checksum.sh), не afick. Syslog проверялся локальным syslog-ng, не корпоративным SIEM.
Файлы отчётов
PMI log excerpt
=== PMI tests 2026-06-14T06:37:49+00:00 ===
PASS #1 IP allow/deny (allowed=200 denied=403)
PASS #2 Basic auth (401/401/200)
PASS #3 Client TLS certificate (400/200/400)
PASS #4 auth_request (200/401/403)
PASS #5 satisfy all matrix (200/401/403/403)
PASS #6 URL access rules (/public/ vs /admin/)
PASS #7 limit_except GET POST (PUT/DELETE=403)
PASS #8 internal location (direct=404 rewrite=200)
PASS #9 HTTPS TLS handshake
PASS #10 TLSv1.2 ok, TLSv1.1 rejected
PASS #11 HTTP redirect 301 + HSTS header
PASS #14 syslog receives nginx events
PASS #15 limit_req returns 503 (3) and 200 (2) in: 200 200 503 503 503
PASS #16 limit_conn returns 503 (200200503503503)
PASS #17 client_max_body_size (small=200 large=413)
PASS #18 client_body_timeout (curl exit 1)
PASS #19 server_tokens off
PASS #20 custom error_page 404
PASS #21 autoindex off (403, no listing)
PASS #22 proxy_pass to backend (200)
PASS #23 web root restriction (200/404)
=== Summary: PASS=21 FAIL=0 SKIP=0 ===
PASS #12 access_log contains test-page and another-page
PASS #13 error_log contains upstream error
FIM log excerpt
FIM checksum audit 2026-06-14T06:38:01+00:00
NOTE: SHA256 baseline substitute for afick on test stand only.
Baseline created (22 files)
PASS baseline check (no changes)
PASS tamper detected after file change (/fim-watch/config.snippet)
PASS baseline restored after revert
PASS #24 integrity control (checksum substitute for afick)