View Issue Details

IDProjectCategoryView StatusLast Update
0000002Seda's EnhancementsSecurity/Permissionspublic2024-04-20 19:24
ReporterSeda Assigned ToSeda  
PriorityurgentSeverityblockReproducibilityN/A
Status assignedResolutionopen 
Product VersionSE2024 
Target VersionSE2025 
Summary0000002: Harden Security of Default Configuration
DescriptionThe default configuration used to deploy Debian is based on conventions from 2012; nothing much has changed since then aside from slimming it down.

There are numerous security issues with this now, and this ticket is designed to track all of them so that they can be resolved in the next major release of SE.

Comment is invited.
Steps To ReproduceN/A
Additional InformationThis bug may link to other bugs.
TagsNo tags attached.

Relationships

parent of 0000003 resolvedSeda SSH Hardening 

Activities

Seda

2024-04-20 19:24

administrator   ~0000006

All eCryptfs configurations are now considered obsolete and will be in-field replaced with fscrypt. An automated migration is not currently possible, so this will involve manual effort on each affected system.

Issue History

Date Modified Username Field Change
2024-04-06 16:14 Seda New Issue
2024-04-06 16:14 Seda Status new => assigned
2024-04-06 16:14 Seda Assigned To => Seda
2024-04-06 16:17 Seda Relationship added parent of 0000003
2024-04-20 19:24 Seda Note Added: 0000006