...
| No. | Project Name | TSC Subgroup Release Status | Is this your first release | Blue Print Stage
| CD Logs URL to be used for review (Column filled in by PTLs) | Link to executive one pager (editable doc format) (Column filled in by PTLs) | API Info Reporting Review (Column filled in by API Subcommittee) (note for PTLs – go here for steps to fill in project API info form) | BluVal BlueVal Logs or Manual Logs | Security Certification (TO be filled by Security Subcommittee) Pass/Fail Criteria: Steps To Implement Security Scan Requirements Exception requests should be filed at: Release 7: Akraino CVE and KHV Vulnerability Exception Request | Upstream Review (Column filled by Upstream Subcommittee and PTLs) (note PTL can go to R7 Release Upstream Compliance to find details) | Date ready for TSC review (Column filled in by PTLs) | TSC Review Date (Column filled in by TSC) | |
| 1 | No | Mature | https://nexus.akraino.org/content/sites/logs/parserlabs/r4/cvb/ | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2 | Not in this release | ||||||||||||
| 3 | |||||||||||||
| 4 | |||||||||||||
| 5 | |||||||||||||
| 6 | |||||||||||||
| 7 | |||||||||||||
| 8 | |||||||||||||
| 9 | |||||||||||||
| 10 | |||||||||||||
| 11 |
| ||||||||||||
| 12 | |||||||||||||
| 13 | |||||||||||||
| 14 | |||||||||||||
| 15 | |||||||||||||
| 16 | No | Mature | https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/ | Release 7 Documentation for IEC Type 5 | No API changes from R6, per e-mail from Pengjin at SOCNOC | Vuls https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/vuls/ lynis https://nexus.akraino.org/content/sites/logs/socnoc/job/IEC_TYPE5/R7/lynis/ Kube-Hunter Not Applicable | Approved | Approved | Approved | ||||
| 17 | |||||||||||||
| 18 | No | Incubation | https://nexus.akraino.org/content/sites/logs/cmti/job/pcei-daily/ | https://wiki.akraino.org/x/LoMcB | Sent e-mail to Oleg to confirm no API changes from R7 Oleg confirmed | https://nexus.akraino.org/content/sites/logs/pcei/job/results
Updated results: https://nexus.akraino.org/content/sites/logs/pcei/job/v2/results
Updated results (wrong file submitted on Feb 9. Please see below for Lynis fixes): https://nexus.akraino.org/content/sites/logs/pcei/job/v3/results |
Performing test ID AUTH-9328 (Default umask values): FAILED Note: The exception is granted for cases that can't be fixed due to software or hardware issues. Umask issue fits to a fixable configuration issue. More justifications for the exception have to be provided. Result: sysctl key kernel.dmesg_restrict: FAILED The version of the submitted Lynis logs is identical. Lynis: Performing test ID AUTH-9328 (Default umask values): FAILED NOTE: changing the UNMASK value from default 022 to 027 resulted in the Lynis test suite erroring out. Requested Exception Result: sysctl key net.ipv4.conf.default.accept_source_route: FAILED FIXED Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED FIXED Submitted correct logs for Lynis Vuls: Accepted Kube-hunter: No issue found but there is a missing pod.log | ||||||
| 19 | |||||||||||||
| 20 | |||||||||||||
| 21 | |||||||||||||
| 22 | |||||||||||||
| 23 | Mature | ||||||||||||
| 24 | |||||||||||||
| 25 | |||||||||||||
| 26 | |||||||||||||
| 27 | |||||||||||||
| 28 | No | Incubation | https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/ See test documentation for details | Smart Data Transaction for CPS R7 Datasheet | No API changes from R6, per e-mail from Colin Peters, | Vuls https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/sdt-vuls/2/ Lynis https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/lynis/3/ Kube-Hunter https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt/r7/sdt-bluval/1/ | Approved | Approved (1/18) |
| Approved | |||
| 29 | No | Incubation | https://nexus.akraino.org/content/sites/logs/fujitsu/job/robot-family/R7/sses-lynis/ | One pager for release7 - Akraino - Akraino Confluence | No API changes from R6, per e-mail from Reo Inoue | Lynis | Approved (no changes from R6) | Approved | |||||
| 30 | |||||||||||||
| 31 | CFN (Computing Force Network) Ubiquitous Computing Force Scheduling hanyu ding | Yes | Incubation | https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/r7_cd.log | One pager for R7 - Akraino - Akraino Confluence | API info form uploaded . Scheduled for review at API subcommittee meeting Approved at API subcommittee meeting | Kube-hunter: https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/kube-hunter-scan.logVuls: https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/vlus.log Lynis： https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis-after.log
updated https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis0310.log
updated https://nexus.akraino.org/content/sites/logs/cmcc/job/r7/lynis0317.log |
Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED
Performing test ID AUTH-9328 (Default umask values): FAILED Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): FAILED Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED
Lynis: Performing test ID AUTH-9328 (Default umask values): FAILED Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): FAILED Performing test ID HRDN-7220 (Check if one or more compilers are installed): FAILED Vuls: Accepted with Exceptions Kube-hunter: Accepted Note: Please upload the log files to nexus.akraino.org and link them in the Logs column. It is required for security approval. | approved | Jan.30.2023 |
...