Julien

Using electronegativity to validate electron security settings in deskreen https://github.com/doyensec/electronegativity other reference https://github.com/1Password/electron-secure-defaults I'm fine to submit a PR but want to ask first on feedback on likely impact and...

Database starter rules

4

Starter rules - generic - mysql/mariadb - postgres - sqlserver/sybase - oracle mostly on either standard sql statement, either on typical pentest usage. This is very contextual and requires adaptation...

`inspec exec https` results "Profile git dependency failed with default reference"

3

# Describe the problem Doing a inspec exec with a remote profile git https is failing, even with example taken from documentation https://docs.chef.io/inspec/cli/#exec Tested on Ubuntu (18.04) and Macos (12)...

Uncertain if still maintained but there are multiple issues identified from https://crxcavator.io/report/ljdgplocfnmnofbhpkjclbefmjoikgke/3.0.6 * many vulnerabilities associated to retirejs: bootstrap, jquery, moment, background * permissive content-security policy. something like https://github.com/ninoseki/mitaka/pull/477/files would...

logrotate certbot logs: reduce retention

5

#### Describe the bug Certbot/letsencrypt have by default a very high level of log retention which results in hundreds of logs file in /var/snap/nextcloud/current/certs/certbot/logs/. Especially more for a snap, it...

systemd hardening options

3

Expand hardening options on systemd config following https://www.freedesktop.org/software/systemd/man/systemd.exec.html No impact in my setup but likely depends. Note that SystemCallFilter deny list does not seem to apply correctly, be it as...

Install automation with ansible, questions

3

Thanks a lot for your work. Great project! I'm building an ansible role to automate setup of FACT. https://github.com/juju4/ansible-fact/ for now, devel branch is using python installer and working fine...

Current requirements https://github.com/CIRCL/AIL-framework/blob/master/requirements.txt#L68 ``` flask>1.1.2,

[submit_paste] ModuleNotFoundError: No module named 'sflock'

1

sflock has been removed from requirements recently per https://github.com/CIRCL/AIL-framework/commit/0e0a77a86df5f680fe0e1fdd61e1f5fdf8e1a117#diff-4d7c51b1efe9043e44439a949dfd92e5827321b34082903477fd04876edb7552 but submit_paste still is using it and it make supervisor task failed in my ansible role https://github.com/juju4/ansible-ail-framework/runs/3005081242?check_suite_focus=true#step:15:814 still present here https://github.com/CIRCL/AIL-framework/blob/master/bin/LAUNCH.sh...

Configuration documentation?

5

Hello, I gave a try to AIL with docker. It starts correctly. after I filled some terms in Terms Management but I don't see anywhere where I can configure where...