Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: dev-sec/linux-baseline
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 2.8.0
Choose a base ref
...
head repository: dev-sec/linux-baseline
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 2.8.1
Choose a head ref
  • 6 commits
  • 5 files changed
  • 3 contributors

Commits on Oct 19, 2021

  1. added sysctl-34 for checking link protection settings (#160)

    Common and long-standing exploits regard unprotected links, fifos and
    regular files, which are created or controlled by an attacker to gain
    access to other files or control over other programs.
    
    Signed-off-by: Claudius Heine <ch@denx.de>
    cmhe authored Oct 19, 2021
    Configuration menu
    Copy the full SHA
    00d24ba View commit details
    Browse the repository at this point in the history
  2. update inspec.yml and changelog

    dev-sec CI committed Oct 19, 2021
    Configuration menu
    Copy the full SHA
    e503f97 View commit details
    Browse the repository at this point in the history

Commits on Nov 23, 2021

  1. feat: add rules to check noexec, nosuid and nodev mount options (#164)

    Setting the `noexec`, `nosuid` and `nodev` mount options for mount
    points where those features are not required, limits possible attack
    vectors.
    
    Closes: #163
    
    Signed-off-by: Claudius Heine <ch@denx.de>
    cmhe authored Nov 23, 2021
    Configuration menu
    Copy the full SHA
    1840dbb View commit details
    Browse the repository at this point in the history
  2. update inspec.yml and changelog

    dev-sec CI committed Nov 23, 2021
    Configuration menu
    Copy the full SHA
    fd9581a View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2022

  1. use input instead of attribute (#166)

    * use input instead of attribute
    
    In the last versions of Inspec and cinc-auditor, attribute is deprecated and input should be used.
    
    https://docs.chef.io/workstation/cookstyle/inspec_deprecations_attributehelper/
    Signed-off-by: Michée Lengronne <michee.lengronne@coppint.com>
    
    * Update sysctl_spec.rb
    
    Signed-off-by: Michée Lengronne <michee.lengronne@coppint.com>
    
    * Update inspec.yml
    
    Signed-off-by: Michée Lengronne <michee.lengronne@coppint.com>
    
    * Update Rakefile
    
    Signed-off-by: Michée Lengronne <michee.lengronne@coppint.com>
    micheelengronne authored Jan 12, 2022
    Configuration menu
    Copy the full SHA
    b5284b9 View commit details
    Browse the repository at this point in the history
  2. update inspec.yml and changelog

    dev-sec CI committed Jan 12, 2022
    Configuration menu
    Copy the full SHA
    4b079b3 View commit details
    Browse the repository at this point in the history
Loading