diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2015-06-19 22:16:47 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2015-06-19 22:16:47 -0300 |
| commit | 0ff8f7bead6d6681b8b3780193d4cb4ca7d01752 (patch) | |
| tree | 1ce3881b4b6ce8241caf5e88e01b5731714ccbf0 | |
| parent | 9f3c0626e2c71497def5e5fbb2be33207af51dc0 (diff) | |
| download | hydra-0ff8f7bead6d6681b8b3780193d4cb4ca7d01752.tar.gz hydra-0ff8f7bead6d6681b8b3780193d4cb4ca7d01752.tar.bz2 | |
TODO update
| -rw-r--r-- | TODO.md | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -43,13 +43,13 @@ Puppet modules ### Security -- [DHE params deployment](https://weakdh.org/sysadmin.html). - badusb mitigations. - knock integration via https://github.com/juasiepo/knockd - apache: - https://httpd.apache.org/docs/2.4/upgrading.html - try libapache2-modsecurity. - deploy https://git.immerda.ch/csp-report/ + - disable other_vhosts_access.log - apt: check if squeeze-lts is being automatically processed. - loginrecords: deploy module. - ssh: @@ -128,6 +128,7 @@ Puppet modules - mail: - support for [preventing SPAM connections with bird](http://www.debian-administration.org/article/715/Preventing_SPAM_connections_with_bird.). - use ssl::dhparams, move to 2048 bit and use the standard file names and paths. + - [Feature #4012: postfix: ship 2048bit dh parameters - Platform - LEAP Issue Tracker](https://leap.se/code/issues/4012) - schleuder: manage `/etc/schleuder/schleuder.conf`, using `superadminaddr: root` or other recipient, to avoid mails sent as `root@localhost`. - deploy https://git.autistici.org/ale/smtp-fp/tree/master |