You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Michael Prokop 29cf8436b8 TT#76552 Harden ngcp-mediator service ... ngcp-mediator service state BEFORE this change: | $ systemd-analyze security ngcp-mediator | tail -1 | → Overall exposure level for ngcp-mediator.service: 9.5 UNSAFE 😨 ngcp-mediator service state AFTER this change: | $ sudo COLUMNS=142 systemd-analyze security ngcp-mediator | grep -v '✓' | NAME DESCRIPTION EXPOSURE | ✗ PrivateNetwork= Service has access to the host's network 0.5 | ✗ User=/DynamicUser= Service runs as root user 0.4 | ✗ RestrictAddressFamilies=~AF_(INET|INET6) Service may allocate Internet sockets 0.3 | ✗ RestrictAddressFamilies=~… Service may allocate exotic sockets 0.3 | ✗ DeviceAllow= Service has a device ACL with some special devices 0.1 | ✗ IPAddressDeny= Service defines IP address whitelits with only localhost entries 0.1 | ✗ RestrictAddressFamilies=~AF_PACKET Service may allocate packet sockets 0.2 | ✗ SystemCallFilter=~@privileged System call whitelist defined for service, and @privileged is included 0.2 | ✗ RestrictAddressFamilies=~AF_NETLINK Service may allocate netlink sockets 0.1 | ✗ RootDirectory=/RootImage= Service runs within the host's root directory 0.1 | SupplementaryGroups= Service runs as root, option does not matter | RemoveIPC= Service runs as root, option does not apply | ✗ RestrictAddressFamilies=~AF_UNIX Service may allocate local sockets 0.1 | | → Overall exposure level for ngcp-mediator.service: 2.0 OK 🙂 Change-Id: If33c303b9df465393f15c0b685d1aab54a465df6		5 years ago
.github/workflows	TT#108003 Add a coverity-scan GitHub workflow	5 years ago
debian	TT#76552 Harden ngcp-mediator service	5 years ago
.gitignore	TT#108003 Update gitignore	5 years ago
.gitreview	MT#7505 Add gitreview file	12 years ago
ChangeLog	Added trunk/tags dir structure.	17 years ago
LICENSE	TT#14053 Add LICENSE file	9 years ago
Makefile	TT#108003 Add a coverity-scan GitHub workflow	5 years ago
cdr.c	TT#108003 Remove unused cdr_parse_json_get_uint64_clamped()	5 years ago
cdr.h	TT#76674 add support for concurrent calls tags	6 years ago
config.c	TT#76900 use separate host/port config for intermediate CDRs	6 years ago
config.h	TT#76900 use separate host/port config for intermediate CDRs	6 years ago
daemonizer.c	TT#33319 Implement redis backend for mediator	8 years ago
daemonizer.h	Added trunk/tags dir structure.	17 years ago
mediator.c	TT#65453 implement intermediate CDR writing	7 years ago
mediator.h	TT#51701 Switch from deprecated /var/lock to /run/lock	6 years ago
medmysql.c	TT#108003 use bool type instead of my_bool	5 years ago
medmysql.h	TT#90500 check and handle strings that are not UTF-8	6 years ago
medredis.c	TT#108003 Remove unused free()	5 years ago
medredis.h	TT#33319 Implement redis backend for mediator	8 years ago
records.c	TT#65453 implement intermediate CDR writing	7 years ago
records.h	TT#37553 always combine acc records from mysql and redis	8 years ago