dev-sec / dev-sec/linux-baseline
Add file system checks for other shadow and passwd/group files
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 875
- Forks
- 193
- Avg merge
- 9m
- Merged PRs (30d)
- 1
Description
Is your feature request related to a problem? Please describe.
We currently have os-02 and os-03 which checks the permissions of /etc/shadow and /etc/passwd.
There are other files related to those, which are currently ignored:
/etc/shadow-(backup for/etc/shadow/etc/gshadow(might contain group password hashes)/etc/gshadow-(backup for/etc/gshadow)/etc/passwd-(backup for/etc/passwd)/etc/group(contains available groups and memberships)/etc/group-(backup for/etc/group)
Describe the solution you'd like
Add checks for those files as well
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the existing os-02 and os-03 checks in the InSpec profile and review how they verify /etc/shadow and /etc/passwd. Add corresponding checks for the six listed shadow, passwd, group, and gshadow files, then run the profile's existing checks to confirm the new paths are covered.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, ruby
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100