New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Lockdown of management shell #136

Open

bluecmd opened this issue Mar 12, 2019 · 0 comments

Contributor

bluecmd commented Mar 12, 2019

The shell, both local and SSH is right now root. There is no real reason for that. In the interest to have security in depth we should fix that.

I have two things in mind:

Run the shells as a non-root user with read/write access to the system config only (and access to ubmcctl)
Add AppArmor policy to further restrict the shell to the above actions.

bluecmd mentioned this issue

Add TOTP authentication to management shell #147

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment