Linux

14440 readers

604 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

Sparrow plugin to run compliance checks on Linux infrastructure (dev.to)

submitted 2 weeks ago by melezhik@programming.dev to c/linux@programming.dev

8 comments fedilink hide all child comments

Some times ago I posted about scc tool, here is a short update with some example reports provided. https://dev.to/melezhik/linux-compliance-checks-with-sparrow-plugin-2160

People can use the plugin to check if their Linux configuration files are security compliant

Sparrow is a Raku automation framework

you are viewing a single comment's thread
view the rest of the comments

[–] vk6flab@lemmy.radio 4 points 2 weeks ago (1 children)

Yeah .. voting around here is interesting from time to time.

On a positive note, I hadn't heard of the Linux Security Audit Project, looks interesting, thank you.

I only briefly skimmed through the readme so I might have missed it, but I wonder how they're able to claim compliance with specific standards.

It was my understanding that it's typically a drawn out expensive process with a certificate to hang on the wall after the fact.

[–] fartsparkles@lemmy.world 4 points 2 weeks ago

They make it clear it’s an assessment aid rather than a replacement for professional audits.

Ultimately, you need to be accredited by a third party to whatever standard you’re targeting. Linux Security Audit Project just gives you some checks to help review your current posture and start tackling things ahead of the audit.