Back to Checks
e2enetworks

E2E Networks nodes do not have rescue mode enabled

node_rescue_mode_disabled
Service: nodeSeverity: medium
OfficialBuilt-inVerified
Resource Type:NotDefined

E2E Networks nodes should not be running in rescue mode, which grants elevated filesystem access and can bypass normal operating controls.

Prowler logoProwlerprowler-provider-e2enetworks

Risk

Rescue mode provides elevated access to node filesystems and can bypass normal operating controls, increasing the risk of unauthorized data access or persistence.

Run this check with Prowler

Run in Prowler Cloud
Run
prowler e2enetworks --checks node_rescue_mode_disabled

Recommendation

Disable rescue mode on nodes once recovery tasks are complete to restore normal operating controls.

Check Code

from prowler.lib.check.models import Check, CheckReportE2eNetworks
from prowler.providers.e2enetworks.services.node.node_client import node_client


class node_rescue_mode_disabled(Check):
    """Check if E2E Networks nodes do not have rescue mode enabled."""

    def execute(self) -> list[CheckReportE2eNetworks]:
        findings = []
        for node in node_client.nodes:
            report = CheckReportE2eNetworks(metadata=self.metadata(), resource=node)
            report.status = "PASS"
            report.status_extended = (
                f"Node {node.name} does not have rescue mode enabled."
            )
            if node.rescue_mode_status != "Disabled":
                report.status = "FAIL"
                report.status_extended = f"Node {node.name} has rescue mode enabled."
            findings.append(report)
        return findings

References