CyberMind-FR
3b84c8a047
- Create secubox-auth-logger package to monitor SSH/LuCI auth failures - auth-monitor.sh watches logread for failed password attempts - Supports OpenSSH, Dropbear, and uhttpd/LuCI authentication - Logs failures to syslog with secubox-auth tag for CrowdSec parsing - Fix wizard.js syntax error with computed property names - Remove broken Dropbear verbose config (2024.86 doesn't support -v) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
24 lines
484 B
Bash
24 lines
484 B
Bash
#!/bin/sh /etc/rc.common
|
|
# SecuBox Authentication Logger
|
|
# Monitors SSH and LuCI auth failures for CrowdSec
|
|
# Copyright (C) 2024 CyberMind.fr
|
|
|
|
START=99
|
|
STOP=10
|
|
USE_PROCD=1
|
|
|
|
PROG=/usr/lib/secubox/auth-monitor.sh
|
|
|
|
start_service() {
|
|
procd_open_instance
|
|
procd_set_param command "$PROG" start
|
|
procd_set_param respawn
|
|
procd_set_param stdout 0
|
|
procd_set_param stderr 1
|
|
procd_close_instance
|
|
}
|
|
|
|
service_triggers() {
|
|
procd_add_reload_trigger "secubox-auth-logger"
|
|
}
|