-
The rule incorrectly fails this check if the more secure `sandbox` option is used on an RHEL7 system.
Per `sshd_config` man page
```
UsePrivilegeSeparation
Specifies whether sshd(8) separates p…
-
This GitHub repository provides [high-level](https://github.com/JillDeGraff/ONCWatch/issues/1#issuecomment-473574343) and [selectively detailed](https://github.com/JillDeGraff/ONCWatch/issues/1#issuec…
-
"The PSM shall use only FIPS Pub 140-2-approved (or higher) encryption algorithms." and "The Contractor's data encryption solution shall meet Federal Information Processing Standard (FIPS) 140-2 and …
-
### Problem Description
The piv-tool.exe generation of 2048-bit (0x07) and 3072-bit (0x05) keys fails with incorrect parameters error. Using 1024-bit (0x06) seems to work. Command output of failure…
-
As discussed in https://github.com/tavendo/WAMP/issues/128 _WAMP-CRA_ is unsafe in regards to database thefts. A new and better authentication method is required. [SCRAM](http://en.wikipedia.org/wiki/…
-
I would like to use OrientDB for a healthcare application in the U.S. One of the requirements is that the data be encrypted at rest. This could probably be done through writing drivers for a particula…
-
The root repo directory is not a valid Go package because it does not contain any Go files. This means that the link to godoc.org in the Readme (the badge) is broken and `go get` cannot be used to fet…
-
### All Fields Are Required
**Organization Name (N/A, if individual): Symantec
**Organization Type (see below for codes)**: 2
**Document (63-3, 63A, 63B, or 63C)**: General
**Reference (Inc…
-
**Organization**:2
**Type**:Researcher
**Document (63-3, 63A, 63B, or 63C)**: 63B
**Reference (Include section and paragraph number)**: 5.1.1.1
**Comment (Include rationale for comment)**:
NIST sh…
-
I came across this while reviewing and researching the RNG code.
First, I'm not sure that it applies to the Trezor hardware because I found this info in a manual for another MCU. But, the descripti…