Commit 2cd02a00 authored by JooHan Hong's avatar JooHan Hong

ansible, 2021-03-08, update16

parent 869cee43
Pipeline #5125 passed with stages
in 2 seconds
[![logo](https://www.hongsnet.net/images/logo.gif)](https://www.hongsnet.net)
# Ansible 활용
> MISC로 분류된 Maintenance 작업을 수행한다.
# Table of Contents
| NO | ITEM | Content | 비고 |
| ------ | ------ | ------ | ------ |
| 1 | Nginx Install | [GO](./Nginx/) | |
| 2 | Nginx Config Deploy | [GO](./Config/) | |
......@@ -12,3 +12,6 @@
| 2 | OS Package Installing (apt) | [GO](./APT/) | |
| 3 | OS Minimal Packages Installing (apt) | [GO](./APT/MINIMAL/) | |
| 4 | OS Package Installing (yum) | [GO](./YUM/) | |
| 5 | OS File Fetch | [GO](./FILE_FETCH/) | |
| 6 | OS File Copy | [GO](./FILE_COPY/) | |
| 7 | Zabbix-Agent Installing | [GO](./ZABBIX/) | |
......@@ -15,7 +15,6 @@
| 5 | Users Management ITEMs | [GO](./USER/) | |
| 6 | Virtualization Maintenance ITEMs | [GO](./VM/) | |
| 7 | Secure Vulnerability ITEMs | [GO](./SECURE/) | |
| 8 | MISC ITEMs | [GO](./MISC/) | |
# Overview
......
[![logo](https://www.hongsnet.net/images/logo.gif)](https://www.hongsnet.net)
# Ansible 활용
> OS 보안취약점 조치작업을 수행한다.
# Table of Contents
| NO | ITEM | Content | 비고 |
| ------ | ------ | ------ | ------ |
| 1 | MariaDB Install | [GO](./MariaDB/) | |
| 2 | OS Package Installing (apt) | [GO](./APT/) | |
1. /etc/securetty, 권한점검
2. /etc/ssh/sshd_config, 설정 취약점
3. pam_common, 패스워드 취약점
4. pam_tally2, 설정 취약점
5. /etc/passwd, /etc/group, /etc/shadow, 파일의 권한 취약점
6. /etc/hosts, 파일의 권한 취약점
7. suid,sgid,sticky, 설정 bit 제거 및 적용
8. cron deny 설정
9. su, pam_wheel 모듈적용 취약점
10. login_defs, 설정 취약점
11. issue_motd, 설정 취약점
12. rsyslog, 설정 취약점
13. /etc/profile, TMOUT 설정취약점
14. Banner 설정 취약점
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment