...
No. | Project Name | PTL | Main Committer | Self-Certification Page | Documentation Sub-Committee | Logs (Vuls, Lynis, KubeHunter) | Security Sub-Committee | ||
---|---|---|---|---|---|---|---|---|---|
1 | Maturity Review performed over e-mail on May 5th, 2021. Link to the overview: 2021 year | https://nexus.akraino.org/content/sites/logs/baidu/job/security_scan/aiedge/4/result/ | |||||||
2 | IEC Type 2 for Integrated Edge Cloud (IEC) Blueprint Family | ||||||||
3 | |||||||||
4 | IEC Type 5: SmartNIC for Integrated Edge Cloud (IEC) Blueprint Family | jin peng | Maturity Review Certification of SmartNIC | Documentation Review Meeting notes | socnoc - Akraino - Akraino Confluence | ||||
5 | IEC Type 3: Android cloud native applications on Arm servers in edge for Integrated Edge Cloud (IEC) Blueprint Family | Maturity Review Certification of Android Cloud | Documentation Review Meeting notes |
https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v5/
https://nexus.akraino.org/content/sites/logs/ysemi/job/v1/validation_results_v6/
|
Lynis: Performing test ID BOOT-5122 (Check for GRUB boot password): FAILED Test: Checking presence /var/run/reboot-required.pkgs: FAILED Performing test ID AUTH-9229 (Check password hashing methods): FAILED Test: Checking SHA_CRYPT_MIN_ROUNDS option in /etc/login.defs: FAILED Performing test ID USB-2000 (Check USB authorizations): FAILED Performing test ID USB-3000 (Check for presence of USBGuard): FAILED Performing test ID SSH-7408 (Check SSH specific defined options): FAILED Performing test ID KRNL-6000 (Check sysctl key pairs in scan profile): FAILED |
Approved by Process Sub-Commitee. | Tina Tsou | ||
6 | Smart Cities |
Lynis: Test: Checking SHA_CRYPT_MIN_ROUNDS option in /etc/login.defs: NOT PRESENT IN THIS LOG USB- 3000 (Check for presence of USBGuard): FAILED 06- 23 07: 10:51 Checking USBGuard rule for controllers connected before daemon starts (PresentControllerPolicy) 06- 23 07: 10: 2022-05-20 01:19:28 Result: USBGuard not foundPerforming test ID KRNL-6000 (Check sysctl key pairs in scan profile): FAILED 2022-05-20 01:19:43 Result: sysctl key dev.tty.ldisc_autoload has a different value than expected in scan profile. Expected=0, Real=1 2022-05-20 01:19:43 Result: key fs.protected_fifos does not exist on this machine 2022-05-20 01:19:43 Result: key fs.protected_hardlinks does not exist on this machine 2022-05-20 01:19:43 Result: key fs.protected_regular does not exist on this machine 2022-05-20 01:19:43 Result: key fs.protected_symlinks does not exist on this machine 2022-05-20 01:19:43 Result: sysctl key fs.suid_dumpable has a different value than expected in scan profile. Expected=0, Real=2 2022-05-20 01:19:43 Result: key hw.kbd.keymap_restrict_change does not exist on this machine 2022-05-20 01:19:43 Result: key kernel.core_setuid_ok does not exist on this machine 2022-05-20 01:19:43 Result: sysctl key kernel.core_uses_pid has a different value than expected in scan profile. Expected=1, Real=0 2022-05-20 01:19:43 Result: key kernel.exec-shield does not exist on this machine 2022-05-20 01:19:43 Result: key kernel.exec-shield-randomize does not exist on this machine 2022-05-20 01:19:43 Result: sysctl key kernel.kptr_restrict has a different value than expected in scan profile. Expected=2, Real=1 2022-05-20 01:19:43 Result: key kernel.maps_protect does not exist on this machine 2022-05-20 01:19:43 Result: sysctl key kernel.modules_disabled has a different value than expected in scan profile. Expected=1, Real=0 2022-05-20 01:19:43 Result: key kernel.suid_dumpable does not exist on this machine 2022-05-20 01:19:43 Result: sysctl key kernel.sysrq has a different value than expected in scan profile. Expected=0, Real=176 2022-05-20 01:19:43 Result: sysctl key kernel.unprivileged_bpf_disabled has a different value than expected in scan profile. Expected=1, Real=2 2022-05-20 01:19:43 Result: sysctl key net.ipv4.conf.all.forwarding has a different value than expected in scan profile. Expected=0, Real=1 2022-05-20 01:19:43 Result: sysctl key net.ipv4.conf.all.log_martians has a different value than expected in scan profile. Expected=1, Real=0 2022-05-20 01:19:43 Result: sysctl key net.ipv4.conf.all.send_redirects has a different value than expected in scan profile. Expected=0, Real=1 2022-05-20 01:19:43 Result: sysctl key net.ipv4.conf.default.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 2022-05-20 01:19:43 Result: sysctl key net.ipv4.conf.default.log_martians has a different value than expected in scan profile. Expected=1, Real=0 2022-05-20 01:19:43 Result: sysctl key net.ipv6.conf.all.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 2022-05-20 01:19:43 Result: key net.ipv6.conf.all.send_redirects does not exist on this machine 2022-05-20 01:19:44 Result: sysctl key net.ipv6.conf.default.accept_redirects has a different value than expected in scan profile. Expected=0, Real=1 51 Result: PresentControllerPolicy = keep |
Records of Details
No. | Project Name | PTL | Main Committer | Self-Certification Page | Documentation Sub-Committee | Logs (Vuls, Lynis, KubeHunter) | Security Sub-Committee | Process Sub-Committee | |
---|---|---|---|---|---|---|---|---|---|
4 | Maturity Review Certification of Federated ML Application At Edge Blueprint performed over mail on 01/04 & stored at Documentation Sub-committee reviews for 2022. It is recommended to Akraino TSC to deem the maturity requirements for Documentation to "mature" level as fulfilled and accept the BP graduation request to "Mature" level. | 2/28/2022 Update |
| Approved by Process Sub-Commitee. |
...