From 0ff8f7bead6d6681b8b3780193d4cb4ca7d01752 Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Fri, 19 Jun 2015 22:16:47 -0300 Subject: TODO update --- TODO.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/TODO.md b/TODO.md index b27d547..cceb046 100644 --- a/TODO.md +++ b/TODO.md @@ -43,13 +43,13 @@ Puppet modules ### Security -- [DHE params deployment](https://weakdh.org/sysadmin.html). - badusb mitigations. - knock integration via https://github.com/juasiepo/knockd - apache: - https://httpd.apache.org/docs/2.4/upgrading.html - try libapache2-modsecurity. - deploy https://git.immerda.ch/csp-report/ + - disable other_vhosts_access.log - apt: check if squeeze-lts is being automatically processed. - loginrecords: deploy module. - ssh: @@ -128,6 +128,7 @@ Puppet modules - mail: - support for [preventing SPAM connections with bird](http://www.debian-administration.org/article/715/Preventing_SPAM_connections_with_bird.). - use ssl::dhparams, move to 2048 bit and use the standard file names and paths. + - [Feature #4012: postfix: ship 2048bit dh parameters - Platform - LEAP Issue Tracker](https://leap.se/code/issues/4012) - schleuder: manage `/etc/schleuder/schleuder.conf`, using `superadminaddr: root` or other recipient, to avoid mails sent as `root@localhost`. - deploy https://git.autistici.org/ale/smtp-fp/tree/master -- cgit v1.2.3