{
  "slug": "ssh-public-exposure-check",
  "title": "Check Whether SSH Is Publicly Bound",
  "fixture": "containers/firewall-exposure-lab",
  "command_count": 3,
  "container_tool": "docker",
  "image": "localhost/linuxoneliners-lab:latest",
  "exit_code": 0,
  "elapsed_ms": 218,
  "stdout": "::fixture-ready::\n$ ss -ltnp | grep ':22'\nLISTEN 0      128          0.0.0.0:22        0.0.0.0:*     users:((\"sshd\",pid=801,fd=3))\n::exit-code::0\n$ ufw status numbered | grep '22/tcp'\n[ 1] 22/tcp                     ALLOW IN    203.0.113.0/24\n::exit-code::0\n$ ss -ltnp | awk '$4 ~ /:22$/ && $4 !~ /^127[.]/ {print}'\nLISTEN 0      128          0.0.0.0:22        0.0.0.0:*     users:((\"sshd\",pid=801,fd=3))\n::exit-code::0\n",
  "stderr": "",
  "ok": true,
  "security": {
    "network": "none",
    "capabilities": "dropped",
    "no_new_privileges": true,
    "memory": "256m",
    "cpus": "1",
    "pids_limit": 128,
    "tmpfs": [
      "/tmp",
      "/var"
    ]
  }
}