openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38447.rst
Major Hayden bfcf6c7423 Initial import of openstack-ansible-security role 
This role contains around 150 controls from the 270+ controls that exist
in the RHEL 6 STIG. New controls are still being added.

Implements: blueprint security-hardening

Change-Id: I0578f86bf42d55242bc72b97b40a5935a3cb18d6
2015-10-07 07:27:39 -05:00

564 B
Raw Blame History

Exception

Verifying contents of files installed from packages is more difficult in Ubuntu, mainly due to the lack of an equivalent of rpm -V. The debsums package installs the debsums command and that can be used to look for files that have changed since the package was installed.

However, not all packages have MD5 checksums for all files and debsums doesn't do detailed checking like rpm. Deployers are urged to run debsums -c to review changes made to files on their systems. This report takes a long time to run on most systems.