Python Pexpect and Check Point Gaia Expert Mode - Check Point CheckMates

Python Pexpect and Check Point Gaia Expert Mode

I administer a few Check Point Firewalls at work that run on the Gaia operating system. Gaia is a hardened, purpose-built Linux OS using the 2.6 kernel.

I am a novice at Python and I need to write a script that will enter "expert mode" from the clish shell. Entering expert mode is similar to invoking su as it gives you root privileges in the BASH shell. Clish is a Cisco like custom shell made to ease OS configuration changes.

I saw a similar discussion at pexpect and ssh: how to format a string of commands after su - root -c, but people responding recommended sudo. This is not an option for me as sudo is not supported by the OS and if you were to install it, clish would not recognize the command.

The goal of my script would be to SSH to the device, login, invoke expert mode, then run grep admin /etc/passwd and date. Again, sudo is not an option.

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

3 Replies

Nick_Doropoulos

Advisor

‎2019-05-0112:45 PM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

Hi Lisa,

Thank you for raising this query.

Personally, I don't think there is a need for a script here as it's way easier by carrying out the instructions below:

Navigate to the firewall's expert mode and type chsh -s /bin/bash admin

The above command should put you in expert mode upon the next login.

Then, to display the output of certain commands upon login, you will need to edit the .bashrc file inside the /home/admin directory. Once inside the said directory:

vi .bashrc

Press Shift + G to go to the bottom of the file followed by ' o' to start editing the file.

Next type the commands that you want.

grep admin /etc/passwd

date

Have a look at this screenshot as well if needed:

Finally, press Escape followed by :wq to save the changes. The end result can be seen below next time you login:
Repeat the same process on every other firewall.

Since you said that you administer only a few firewalls I believe that would suffice.

I hope this helps.

Kudos

Click here to give kudos to this post.

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

Lisa11

Explorer

‎2019-05-0212:46 AM

Show option menu

Mark as New
Bookmark
Subscribe
Mute
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content

In response to Nick_Doropoulos

@Nick_Doropoulos wrote:

Hi Lisa,

Thank you for raising this query.

Personally, I don't think there is a need for a script here as it's way easier by carrying out the instructions below:

Navigate to the firewall's expert mode and type chsh -s /bin/bash admin

The above command should put you in expert mode upon the next login.

Then, to display the output of certain commands upon login, you will need to edit the .bashrc file inside the /home/admin directory. Once inside the said directory:

vi .bashrc

Press Shift + G to go to the bottom of the file followed by ' o' to start editing the file.

Next type the commands that you want.

grep admin /etc/passwd diebestetest

date

Have a look at this screenshot as well if needed:

Finally, press Escape followed by :wq to save the changes. The end result can be seen below next time you login:

Repeat the same process on every other firewall.

Since you said that you administer only a few firewalls I believe that would suffice.

I hope this helps.