You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Added
Security page (admins): a weekly scan of the machine, through a new
read-only helper command (security-scan, helper v13, Linux). It lists every
listening service with what the host firewall (nftables, ufw, firewalld or
iptables) does with a new connection from the LAN and from the mesh, pending
and security updates and known vulnerabilities from the distribution's own
tools (apt and debsecan, dnf updateinfo, pacman with arch-audit, zypper),
reboots and restarts updates wait for, and SSH, kernel, account and fips file
settings. Findings are scored 0-100 with a grade and a fix for each; the
newest 12 reports are kept for a trend. Scans run on a chosen weekday and
hour (a missed one runs when fips-ui is back) or with Scan now
(docs/security-scan.md).
Node manager: a Security column with each managed node's grade and score.