Albert Heinle

Hardening Zabbix Docker images

6

##### SUMMARY Configuration files inside the various images are not hardened wrt. different security benchmarks like CIS. I ran the CoGuard CLI (https://github.com/coguardio/coguard-cli) against e.g. zabbix/zabbix-web-nginx-mysql, and it produced 50...

In the [latest documentation](https://web.mit.edu/kerberos/krb5-latest/doc/admin/conf_files/krb5_conf.html) of krb5.conf, it says: > Placing a ‘*’ after the closing bracket of a section name indicates that the section is final, meaning that if the...

Inconsistency in chef-server.rb optional settings.

1

I think the documentation, there is an inconsistency: You mention in [these lines](https://github.com/chef/chef-server/blame/master/docs-chef-io/content/server/v14/config_rb_server_optional_settings.md#L1763-L1767) that the default value is `true` if `topology` is set to `ha`, but in [these lines](https://github.com/chef/chef-server/blame/master/docs-chef-io/content/server/v14/config_rb_server_optional_settings.md#L102-L105), where...

AWS import aws_kms_grant violates hcl2 syntax

2

It took me a while to see the issue, but here is the problem. I used the following command with aws as my provider (Terraformer version 0.8.21, Terraform version 1.2.9...

Problems hardening the image according to CIS benchmarks

4

The CIS benchmark 2.3.3 for NGINX requires the `nginx.pid` file to be owned by `root:root` and readable by anyone else. According to best practices for Dockerfiles, one should run processes...

Emacs exit is slow when auto-complete-mode is enabled

12

I had for a while a problem that my emacs would exit in a very slow way. So I went through my `.emacs` file and disabled one by one different...

In general, it is not best practice to leave the user as `root` for Docker containers, since you buy yourself several security issues with that. I hope you are not...

I love the feature where you include line numbers to blocks. Why was this not extended to objecs? https://github.com/amplify-education/python-hcl2/blob/252ebaf9179e3fb41a4637e0c4f6bf5b9aa52698/hcl2/transformer.py#L100-L105 I tried out a small alteration, and it seems to work...

Tool Integration with CoGuard

2

Hi! Love your project! As I outlined to Mark, I would love to support the tool with our scanning capabilities on infrastructure related files. We cloned your project and did...

Confict between `inline-env-var` and `command-instead-of-shell`

2

##### Summary It appears that the remediation to one issue is causing the rise of a different one. For the Rule [`inline-env-var`](https://github.com/ansible/ansible-lint/blob/37dd23d6c2e67014915f4e5beb6ab3d0b20dc295/src/ansiblelint/rules/inline_env_var.md) in the current version, the recommended correction is...