cschantz
b9c9a058ba
Issue: Baseline was stored in /var/lib/suspicious-login-monitor/ which is outside the toolkit directory structure. When toolkit is deleted, baseline data would remain on system. Changes: - Changed BASELINE_DIR from /var/lib/suspicious-login-monitor to $TOOLKIT_ROOT/data/suspicious-login-monitor - Migrated existing baseline.dat to new location - Removed old /var/lib/suspicious-login-monitor directory Result: All toolkit data now contained within toolkit directory. When toolkit is deleted, baseline is removed automatically. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
9 lines
273 B
Plaintext
9 lines
273 B
Plaintext
# Baseline data for suspicious login monitor
|
|
# Last updated: Tue Feb 3 04:04:53 PM EST 2026
|
|
BASELINE_SSH_KEY_COUNT=1
|
|
BASELINE_USER_COUNT=3
|
|
BASELINE_TYPICAL_LOGIN_HOURS="16"
|
|
BASELINE_PASSWORD_CHANGES_PER_WEEK=0
|
|
BASELINE_NEW_USERS_PER_WEEK=0
|
|
BASELINE_LAST_UPDATE=1770152693
|