vk6flab comments on Sparrow plugin to run compliance checks on Linux infrastructure

submitted 4 months ago by melezhik@programming.dev to c/linux@programming.dev

8 comments fedilink hide all child comments

Some times ago I posted about scc tool, here is a short update with some example reports provided. https://dev.to/melezhik/linux-compliance-checks-with-sparrow-plugin-2160

People can use the plugin to check if their Linux configuration files are security compliant

Sparrow is a Raku automation framework

you are viewing a single comment's thread
view the rest of the comments

[–] vk6flab@lemmy.radio 2 points 4 months ago (2 children)

Ssh access should be passwords only

What are you basing this on?

parent

[–] fartsparkles@lemmy.world 4 points 4 months ago

Definitely not NIST 800-53, PCI-DSS, or ISO 27001; all of which stipulate ssh key management not password-based authentication.

parent

[–] melezhik@programming.dev [S] 1 point 4 months ago

Typo )) sorry , meant password less

parent