Page MenuHomePhabricator

Systemd hardening of CAS service unit
Closed, ResolvedPublic

Description

There's a number of Systemd hardening features we can add to the CAS unit.

Details

Related Gerrit Patches:
operations/puppet : productionapereo_cas: improve systemd security
operations/puppet : productionapereo_cas: update systemd to run as a system user

Related Objects

StatusSubtypeAssignedTask
OpenNone
Resolvedjbond

Event Timeline

herron triaged this task as Medium priority.Sep 26 2019, 5:15 PM

Change 550872 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] apereo_cas: update systemd to run as a system user

https://gerrit.wikimedia.org/r/550872

Change 550872 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] apereo_cas: update systemd to run as a system user

https://gerrit.wikimedia.org/r/550872

Change 551159 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] apereo_cas: improve systemd security

https://gerrit.wikimedia.org/r/551159

Change 550872 merged by Jbond:
[operations/puppet@production] apereo_cas: update systemd to run as a system user

https://gerrit.wikimedia.org/r/550872

Change 551159 merged by Jbond:
[operations/puppet@production] apereo_cas: improve systemd security

https://gerrit.wikimedia.org/r/551159

jbond closed this task as Resolved.Fri, Feb 14, 2:31 PM
jbond claimed this task.