Systemd hardening of CAS service unit
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	MoritzMuehlenhoff
	Sep 26 2019, 1:14 PM

Description

There's a number of Systemd hardening features we can add to the CAS unit.

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	apereo_cas: improve systemd security	operations/puppet	production	+16 -0
	apereo_cas: update systemd to run as a system user	operations/puppet	production	+46 -21

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Open		None	T233921 Further steps for CAS/web SSO
		Resolved		jbond	T233951 Systemd hardening of CAS service unit

Event Timeline

MoritzMuehlenhoff created this task.Sep 26 2019, 1:14 PM

herron triaged this task as Medium priority.Sep 26 2019, 5:15 PM

jbond added a project: User-jbond.Oct 30 2019, 5:54 PM

jbond moved this task from Unsorted 💣 to Back Burner 🏛️ on the User-jbond board.Oct 30 2019, 6:05 PM

jbond moved this task from Back Burner 🏛️ to Active 🚁 on the User-jbond board.Nov 14 2019, 5:22 PM

Change 550872 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] apereo_cas: update systemd to run as a system user

https://gerrit.wikimedia.org/r/550872

gerritbot added a project: Patch-For-Review.Nov 14 2019, 5:23 PM

Change 550872 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] apereo_cas: update systemd to run as a system user

https://gerrit.wikimedia.org/r/550872

Change 551159 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] apereo_cas: improve systemd security

https://gerrit.wikimedia.org/r/551159

jbond moved this task from Active 🚁 to Patch for Review on the User-jbond board.Nov 15 2019, 12:30 PM

Change 550872 merged by Jbond:
[operations/puppet@production] apereo_cas: update systemd to run as a system user

https://gerrit.wikimedia.org/r/550872

Change 551159 merged by Jbond:
[operations/puppet@production] apereo_cas: improve systemd security

https://gerrit.wikimedia.org/r/551159

jbond closed this task as Resolved.Feb 14 2020, 2:31 PM

jbond claimed this task.