This tag identifies security issue.
Details
Details
Description
Jun 3 2020
Jun 3 2020
dereckson added a parent task for T1616: Build a bastion - load balancers - private instances network topology: Unknown Object (Maniphest Task).
dereckson triaged T1616: Build a bastion - load balancers - private instances network topology as Normal priority.
Feb 23 2020
Feb 23 2020
Feb 15 2020
Feb 15 2020
Feb 14 2020
Feb 14 2020
OpenSSH now mitigates this.
We do'nt use sshguard anymore, as login by password is disabled, keys are required.
Done during the migration to EquaTower and Salt for aphlict cachet devcentral wolfphab acquisitariat etherpad tommy ci silly_bardeen.
dereckson added a comment to T1594: Acquisitariat and Etherpad issue.
The option is the same for Etherpad and DevCentral:
dereckson added a project to T1594: Acquisitariat and Etherpad issue: Operations sprints (Consolidate them all).
dereckson updated the task description for T1594: Acquisitariat and Etherpad issue.
Feb 8 2020
Feb 8 2020
dereckson closed T1580: Deploy ACME-specific DNS server, a subtask of T1513: Propagate certificate to Openfire server, as Resolved.
Feb 4 2020
Feb 4 2020
dereckson added a comment to T1580: Deploy ACME-specific DNS server.
The server works fine. Next step is to integrate Certbot or any other client with it and create relevant CNAMEs.
dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2180: Provide homepage for ACME DNS Server.
dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2179: Restrict access to ACME DNS.
dereckson added a comment to T1580: Deploy ACME-specific DNS server.
Server is deployed on Equatower.
dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2178: Provide nginx configuration for ACME DNS.
dereckson added a revision to T1580: Deploy ACME-specific DNS server: D2177: Serve acme.nasqueron.org DNS.
dereckson moved T1580: Deploy ACME-specific DNS server from Backlog to Working on on the Operations sprints (Consolidate them all) board.
dereckson added a project to T1580: Deploy ACME-specific DNS server: Operations sprints (Consolidate them all).
Jan 25 2020
Jan 25 2020
Jan 15 2020
Jan 15 2020
dereckson added a project to T1521: Restrict MySQL access: Operations sprints (Consolidate them all).
dereckson added a comment to T1484: Upgrade Laravel framework.
5.4 migration is done for the running source code, but tests require to cope with the undocumented internal framework mechanisms changes for events.
Jan 14 2020
Jan 14 2020
dereckson added a comment to T1486: Evaluate Archery.
Still maintained.
dereckson updated the task description for T1486: Evaluate Archery.
Jan 13 2020
Jan 13 2020
dereckson added a parent task for T1484: Upgrade Laravel framework: T1336: Migrate tests to PHPUnit 8.
Dec 5 2019
Dec 5 2019
Oct 14 2019
Oct 14 2019
No more log messages.
dereckson added a comment to T1530: pam_nologin link issue in FreeBSD.
$ sudo service cron restart Stopping cron. Waiting for PIDS: 1043. Starting cron.
dereckson added a comment to T1530: pam_nologin link issue in FreeBSD.
Aug 1 2019
Aug 1 2019
xcombelle added a comment to T1524: Monitor sudo files on servers.
I have no idea how to do it, but looks like a good plan. Apart that, in my opinion, you do a much more of what would be necessary to run nasqueron services (but it is your time, you use it like you want)
dereckson added a comment to T1524: Monitor sudo files on servers.
Those are valid concerns.
xcombelle added a comment to T1524: Monitor sudo files on servers.
looks an interesting tool, something quite frightening is that it comes with a set of exploit, (if I understand, a common way to exploit sudo flaws).
As a shell script not even indented, it is absolutely unreadable, and more or less one have to trust the creator to not making mistake.
Moreover for full use, you have to give a sudo password in clear text ( I just don't understand the reason)
As such, I would say it would be kind of crazy to run it automatically and I would not comfortable to simply run it for myself in any way.
Jul 29 2019
Jul 29 2019
dereckson added a comment to T1521: Restrict MySQL access.
Tagging security as we could need follow-up ACL to allow to connect to.
Jul 17 2019
Jul 17 2019