{"id":982,"date":"2024-09-08T15:43:41","date_gmt":"2024-09-08T15:43:41","guid":{"rendered":"http:\/\/www.nokws.top\/?p=982"},"modified":"2024-09-09T09:03:41","modified_gmt":"2024-09-09T09:03:41","slug":"openrasphemongodb","status":"publish","type":"post","link":"http:\/\/www.nokws.top\/index.php\/2024\/09\/08\/openrasphemongodb\/","title":{"rendered":"Openrasp\u548cMongoDB"},"content":{"rendered":"\n

\u66f4\u65b0\u8bb0\u5f55\uff1a<\/p>\n\n\n\n

docker-compose\u4e2d\u7684network\u90e8\u5206\u53ef\u4ee5\u5220\u9664 <\/p>\n\n\n\n

\n\n\n\n

0x01 \u524d\u8a00<\/h2>\n\n\n\n

Openrasp \u7684\u540e\u53f0\u7ba1\u7406\u542f\u52a8\u9700\u8981MongoDB
MongoDB\u7528\u8fc7\u7684\u4eba\u90fd\u77e5\u9053\uff0c\u662f\u771f\u7684\u4e0d\u597d\u7528<\/p>\n\n\n\n

0x02 \u5229\u7528docker\u642d\u5efaMongDB<\/h2>\n\n\n\n

docker compoese<\/p>\n\n\n\n

services:\n  mongodb:\n    container_name: rasp-mongodb\n    restart: unless-stopped\n    image: mongo:4.2.24\n    hostname: mongodb\n    ports:\n      - 27017:27017\n    networks:\n      openrasp:\n        ipv4_address: 192.168.210.252\n    environment:\n      TZ: Asia\/Shanghai\n      MONGO_INITDB_ROOT_USERNAME: username\n      MONGO_INITDB_ROOT_PASSWORD: password\n    volumes:\n      - \/opt\/docker-data\/mongodb\/data:\/data\/db\n      - \/opt\/docker-data\/mongodb\/logs:\/var\/log\/mongodb  # \u65e5\u5fd7\u6302\u8f7d\u5230\u9ed8\u8ba4\u8def\u5f84\n      - \/opt\/docker-data\/mongodb\/config:\/data\/configdb\n      - \/opt\/docker-data\/mongodb\/mongod.conf:\/etc\/mongod.conf  # \u914d\u7f6e\u6587\u4ef6\u6302\u8f7d\n    # \u5220\u9664 command \u884c\uff0c\u9664\u975e\u4f60\u6709\u7279\u5b9a\u9700\u6c42\uff1a\n    # command: mongod --config \/etc\/mongod.conf\nnetworks:\n  openrasp:\n    driver: bridge\n    ipam:\n      config:\n        - subnet: 192.168.210.0\/24\n\n<\/pre>\n\n\n\n
\u6ce8\u610f\u8bbe\u7f6eusername\u548cpassword<\/strong><\/p>\n\n\n\n
\u521b\u5efa\u5b8c\u6587\u4ef6\u540e\u9700\u8981\u5728\u521b\u5efadocker network<\/p>\n\n\n\n
docker network create --driver=bridge --subnet=192.168.210.0\/24 openrasp<\/pre>\n\n\n\n
\u5728\u8def\u5f84\u4e0b\u521b\u5efamongo.conf\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n
systemLog:\n  destination: file\n  path: \/var\/log\/mongodb\/mongod.log #\u65e5\u5fd7\n  logAppend: true\nstorage:\n  dbPath: \/data\/db #\u6570\u636e\u5b58\u50a8 \n  journal:\n    enabled: true\n  wiredTiger:\n    engineConfig:\n      cacheSizeGB: 1\n  engine: wiredTiger\n  directoryPerDB: true\n  journal:\n    enabled: true\n  mmapv1:\n    smallFiles: true\n    journal:\n      enabled: true\nnet:\n  bindIpAll: true #\u8bbe\u7f6e\u6240\u6709ip\u90fd\u53ef\u8fde\u63a5\n  port: 27017\n  protocol: tcp\n  maxIncomingConnections: 10000 \nsecurity:\n  authorization: enabled #\u8fde\u63a5\u542f\u7528\u9274\u6743\n<\/pre>\n\n\n\n
\u5982\u679c\u987a\u5229\u7684\u8bdd\uff0c\u8fd9\u65f6\u5019\u5c31\u53ef\u4ee5\u8fde\u63a5mongodb \u7136\u540e\u65b0\u5efa\u7528\u6237\u4e86
\u5982\u679c\u4e0d\u987a\u5229\u7684\u8bdd\uff0c\u53ef\u4ee5\u770b\u770b\u4e0a\u4e00\u7bc7\u6587\u7ae0\u3002\u3002<\/p>\n\n\n\n
db.createUser({\n  user: '\u7528\u6237\u540d',\n  pwd: '\u5bc6\u7801',\n  roles: [\n    { role: 'dbOwner', db: 'openrasp' },  \/\/ \u62e5\u6709 openrasp \u6570\u636e\u5e93\u7684\u7ba1\u7406\u6743\u9650\n    { role: 'readWrite', db: 'openrasp' } \/\/ \u53ef\u8bfb\u5199 openrasp \u6570\u636e\u5e93\n  ]\n});<\/pre>\n\n\n\n
\u6ce8\u610f\u8bbe\u7f6eusername\u548cpassword<\/strong><\/p>\n\n\n\n
\u4e4b\u540e\u9700\u8981\u4fee\u6539 \/rasp-cloud-*\/conf\/app.conf<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
0x03 \u540e\u7eed <\/strong><\/h2>\n\n\n\n
\u8ba1\u5212\u628amongodb\u4eceopenrasp\u4e2d\u79fb\u9664<\/p>\n","protected":false},"excerpt":{"rendered":"
\u66f4\u65b0\u8bb0\u5f55\uff1a docker-compose\u4e2d\u7684network\u90e8\u5206\u53ef\u4ee5\u5220\u9664 0x01 \u524d\u8a00 Openrasp \u7684\u540e […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-982","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/posts\/982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/comments?post=982"}],"version-history":[{"count":3,"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/posts\/982\/revisions"}],"predecessor-version":[{"id":988,"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/posts\/982\/revisions\/988"}],"wp:attachment":[{"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/media?parent=982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/categories?post=982"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.nokws.top\/index.php\/wp-json\/wp\/v2\/tags?post=982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}