Correct sudoers rules hardening (ANSSI-BP28 R39 to R43)

seapath / meta-seapath

This is the core of the seapath project. The meta-seapath repo contains the yocto Seapath layer, which contains all the code (yocto recipes) needed to build the seapath images used to install seapath (host, guest, flasher, etc.)

https://lfenergy.org/projects/seapath/

Apache License 2.0

6 stars 10 forks source link

Correct sudoers rules hardening (ANSSI-BP28 R39 to R43) #198

Open eroussy opened 5 months ago

eroussy commented 5 months ago

The ANSSI-BP28 R39 to R43 requirements specify sudoers files configuration.

These requirements aren't properly implemented, because old users and group are still present (MAINTN1, MAINTN2, MAINTN3)
The related tests doesn't works (recipes-cukinia-tests/cukinia-tests/files/common_security_tests.d/sudo.conf)