70 lines
2.2 KiB
Markdown
70 lines
2.2 KiB
Markdown
# Сводный отчёт nginx PMI stand
|
|
|
|
**Дата прогона:** 2026-06-14_06-37-41
|
|
**Стенд:** Docker Compose (`results/docker-compose.yml`)
|
|
|
|
## Результаты ПМИ
|
|
|
|
| Метрика | Значение |
|
|
|---------|----------|
|
|
| PASS | 23 |
|
|
| FAIL | 0 |
|
|
|
|
## Целостность (FIM stand-in)
|
|
|
|
| Метрика | Значение |
|
|
|---------|----------|
|
|
| PASS | 4 |
|
|
| FAIL | 0 |
|
|
|
|
> FIM выполнен через SHA256 baseline (`run-fim-checksum.sh`), не afick.
|
|
> Syslog проверялся локальным syslog-ng, не корпоративным SIEM.
|
|
|
|
## Файлы отчётов
|
|
|
|
- [`2026-06-14_06-37-41_pmi.log`](2026-06-14_06-37-41_pmi.log)
|
|
- [`2026-06-14_06-37-41_audit.log`](2026-06-14_06-37-41_audit.log)
|
|
- [`2026-06-14_06-37-41_fim.log`](2026-06-14_06-37-41_fim.log)
|
|
|
|
## PMI log excerpt
|
|
|
|
```
|
|
=== PMI tests 2026-06-14T06:37:49+00:00 ===
|
|
PASS #1 IP allow/deny (allowed=200 denied=403)
|
|
PASS #2 Basic auth (401/401/200)
|
|
PASS #3 Client TLS certificate (400/200/400)
|
|
PASS #4 auth_request (200/401/403)
|
|
PASS #5 satisfy all matrix (200/401/403/403)
|
|
PASS #6 URL access rules (/public/ vs /admin/)
|
|
PASS #7 limit_except GET POST (PUT/DELETE=403)
|
|
PASS #8 internal location (direct=404 rewrite=200)
|
|
PASS #9 HTTPS TLS handshake
|
|
PASS #10 TLSv1.2 ok, TLSv1.1 rejected
|
|
PASS #11 HTTP redirect 301 + HSTS header
|
|
PASS #14 syslog receives nginx events
|
|
PASS #15 limit_req returns 503 (3) and 200 (2) in: 200 200 503 503 503
|
|
PASS #16 limit_conn returns 503 (200200503503503)
|
|
PASS #17 client_max_body_size (small=200 large=413)
|
|
PASS #18 client_body_timeout (curl exit 1)
|
|
PASS #19 server_tokens off
|
|
PASS #20 custom error_page 404
|
|
PASS #21 autoindex off (403, no listing)
|
|
PASS #22 proxy_pass to backend (200)
|
|
PASS #23 web root restriction (200/404)
|
|
=== Summary: PASS=21 FAIL=0 SKIP=0 ===
|
|
PASS #12 access_log contains test-page and another-page
|
|
PASS #13 error_log contains upstream error
|
|
```
|
|
|
|
## FIM log excerpt
|
|
|
|
```
|
|
FIM checksum audit 2026-06-14T06:38:01+00:00
|
|
NOTE: SHA256 baseline substitute for afick on test stand only.
|
|
Baseline created (22 files)
|
|
PASS baseline check (no changes)
|
|
PASS tamper detected after file change (/fim-watch/config.snippet)
|
|
PASS baseline restored after revert
|
|
PASS #24 integrity control (checksum substitute for afick)
|
|
```
|