Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[TECH DEBT] Harden Salt Master #64045

Closed
dwoz opened this issue Apr 8, 2023 · 1 comment
Closed

[TECH DEBT] Harden Salt Master #64045

dwoz opened this issue Apr 8, 2023 · 1 comment
Assignees
@Ch3LL
Labels
Sulfur v3006.0 release code name and version tech-debt
Milestone
Sulfur v3006.0

Comments

@dwoz
Copy link
Contributor

dwoz commented Apr 8, 2023

Description of the tech debt to be addressed, include links and screenshots

While it is documented that masters are sensitive and access should be restricted. There are still some things we can do to harden master installations. We should start adding a salt user and group to master installs and run the master as an un-privileged user. We should also make sure the permissions on any files the master makes are set properly to this user and group.
@dwoz dwoz added tech-debt Sulfur v3006.0 release code name and version labels Apr 8, 2023
@dwoz dwoz mentioned this issue Apr 8, 2023
Merged
@garethgreenaway garethgreenaway added this to the Sulfur v3006.0 milestone Apr 10, 2023
This was referenced Apr 12, 2023
Merged
Closed
@Ch3LL Ch3LL self-assigned this Apr 13, 2023
@Ch3LL
Copy link
Contributor

Ch3LL commented Apr 15, 2023

closed by #64037

@Ch3LL Ch3LL closed this as completed Apr 15, 2023
@barneysowood barneysowood mentioned this issue Apr 29, 2023
Closed
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Ch3LL Ch3LL

Labels
Sulfur v3006.0 release code name and version tech-debt
Projects
None yet
Milestone
Sulfur v3006.0
Development

No branches or pull requests
3 participants
@garethgreenaway @dwoz @Ch3LL