aws / aws/aws-codedeploy-agent
Sign codedeploy-agent package
- Lingua principale
- Rust
- Stelle
- 337
- Fork
- 195
- Merge medio
- 10h 54m
- PR unite (30g)
- 4
Descrizione
In order to install CodeDeploy Agent on Amazon Linux 2 / CentOS / RHEL servers that are configured for the CIS Level 3 Benchmark (High), all packages must be digitally signed by a CA that is recognized by the Operating System. This maps to RHEL STIG Vulnerability V-71979 and Amazon Linux 2 STIG Benchmark 1.2.4.
**Current Value**
```
[ec2-user@ip-172-31-xxx-xxx ~]$ rpm -qi codedeploy-agent
Name : codedeploy-agent
Version : 1.1.2
Release : 1855
Architecture: noarch
Group : Applications/System
Size : 25823745
License : Amazon.com Internal
Signature : (none)
Source RPM : codedeploy-agent-1.1.2-1855.src.rpm
Build Date : Sat Jul 18 00:01:17 2020
Build Host : sds-tod-workers-corp-pdx1-60009.pdx1.corp.amazon.com
Relocations : (not relocatable)
Vendor : Amazon.com
Summary : Provides the required files for CodeDeploy agent to run in EC2 instances
Description :
CodeDeploy instance agent is responsible for doing the actual work of deploying software
on an EC2 instance.
```
**Expected Value (based on SSM Agent)**
```
[ec2-user@ip-172-31-xxx-xxx ~]$ rpm -qi codedeploy-agent
Name : codedeploy-agent
Version : 1.1.2
Release : 1855
Architecture: noarch
Group : Amazon/Tools
License : ASL 2.0
Signature : RSA/SHA256, Tue Aug 4 14:58:37 2020, Key ID 11cf1f95c87f5b1a
Source RPM : codedeploy-agent-1.1.2-1855.src.rpm
Build Date : Sat Jul 18 00:01:17 2020
Build Host : build.amazon.com
Relocations : (not relocatable)
Vendor : Amazon.com
Summary : Provides the required files for CodeDeploy agent to run in EC2 instances
Description :
CodeDeploy instance agent is responsible for doing the actual work of deploying software
on an EC2 instance.
```
Guida per i contributori
Apri la guida per i contributori
Direzione di ricerca
Inizia tracciando come viene compilato e pubblicato l'RPM codedeploy-agent per Amazon Linux 2, CentOS e RHEL. Verifica i metadati e la firma del pacchetto con rpm -qi; l'attività è completata quando il pacchetto riporta una firma RSA/SHA256 riconosciuta invece di Signature: (none), usando la chiave di firma prevista.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Valutazione
- Stack tecnologico
- aws, linux
- Ambito
- build-system, release, security
- Tipo di issue
- Funzionalità
- Difficoltà
- 4/5
- Tempo stimato
- 3-5 giorni
- Stato di attività
- Ferma
- Chiarezza
- Abbastanza chiara
- Idoneità per principianti
- 35/100