dev-sec / dev-sec/chef-ssh-hardening
Add support for Debian 11 "bullseye"
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 168
- Forks
- 66
- Avg merge
- 9h 10m
- Merged PRs (30d)
- 2
Description
Is your feature request related to a problem? Please describe.
The test specs from ssh-baseline are failing with Debian 11 because this repo is missing the logic for handling Debian 11 and the ssh-baseline repo is partially implementing it.
Describe the solution you'd like
Being able to use this repo on Debian 11 with the default attributes. Debian 11 comes with openssh 8.4 (vs openssh 7.9 with Debian 10) so I assume the ciphers/MACs/KEXs need to be upgraded to leverage the new crypto.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the existing Debian 10 handling and compare it with the Debian 11 behavior described in the issue. Run or inspect the failing specs in the linked ssh-baseline repository, then verify that Debian 11 works with the default attributes and that the relevant OpenSSH 8.4 crypto settings are covered.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ruby
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100