Filters, rules and taint

Set a machine's taint configuration

Sets one taint source's state for the given scope (JSON body). source must be one of the gate keys GET /api/machine_taint/ reports (anything else is a 400); state must be on, off, or unset; machine is a machine public_id ('' = global). Gate keys use underscores and are NOT always the name a rule's source field takes: gate weak_random is rule source weak-random, and gate db_rows is rule source db. On success replies 204 No Content. Cookie callers must pass CSRF.

This is a write: a read-only API key is refused with 403.

put/api/machine_taint/

Request

  • Base URL: https://eyalsec.com
  • URL: https://eyalsec.com/api/machine_taint/
  • Auth: one of:
    • API key in header X-API-Key
    • API key in cookie __Host-es2session

Request body

machinestring

Machine public_id to scope to; omit/empty for global.

sourcestring required

Gate key: socket, file, stdin, foreign, env, make_vuln, argv, weak_random, hardcoded, build, posture, concurrency, resource, secret, memory, ffi, lifetime, arith, identity, subprocess, worker, dns, db_rows, calldata, caller, returndata, storage, chainenv, oracle, http, report_cmdline, report_env, report_code, drop_suppressed, handoff.

statestring required

on, off, or unset.

Response

Done. No body.

Changes

No recorded changes to this operation across all 1 revision of this API.