Intel BMC provingground (mirror) https://git.radix-linux.su/BMC/Intel-BMC/provingground.git/atom?h=master 2020-01-11T11:31:35+00:00 2020-01-11T11:31:35+00:00 Suryakanth Sekar suryakanth.sekar@linux.intel.com 2019-11-15T11:46:28+00:00 urn:sha1:65d4fafd39553243d83834a87ce2806059c837b0 Daemon for below functionalities 1. To start the AtScaleDebug service when remote debug on jumper & special user status and enabled. 2. To stop the AtScaleDebug service when remote debug jumper disabled and disabled the special user status. 3. Log the corresponding AtScaleDebug Events 4. Check for user security breach and log the user security event. Tested: Detecting Remote Debug jumper - enabled or disabled Enable the ASD/Disable the ASD based on jumper and spl user password Corresponding the ASD security Event should be logged Check for unsupported shell- user security event: Change shell parameter for enabled user by usermod --shell=/bin/csh <enabled username> "SecurityUserUnsupportedShellEnabled" Event should be logged Check for unsupported shell removed - user security event: change shell parameter for enabled user by usermod --shell=/bin/sh <enabled username> "SecurityUserUnsupportedShellRemoved" Event should be logged Check for Weak Password hashing algorithm Event: change the password hashing algorithm by edit file : /etc/pam.d/common-password -->sha512 to md5 set new password for any user. "SecurityUserWeakHashAlgoEnabled" Event should be logged similar change from md5 to sha512 in /etc/pam.d/common-password file Set new password for any user. "SecurityUserStrongHashAlgoRestored" Event should be logged If root user is enabled "SecurityUserRootEnabled" Event should be logged If root user is disabled "SecurityUserRootDisabled" Event should be logged Change-Id: I88f8614df31df3f35e7d08d2e84aeef7a39edea4 Signed-off-by: Suryakanth Sekar <suryakanth.sekar@linux.intel.com>