Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should check for mitigations (spectre et alii) #1591

Open
eMPee584 opened this issue Jan 5, 2025 · 1 comment
Open

Should check for mitigations (spectre et alii) #1591

eMPee584 opened this issue Jan 5, 2025 · 1 comment
Assignees

Comments

@eMPee584
Copy link

eMPee584 commented Jan 5, 2025

Currently, lynis seems not to check for CPU mitigations. These might be turned off through kernel parameters, which increases the attack surface especially in virtualized environments.

@mboelen
Copy link
Member

mboelen commented Jan 29, 2025

Thanks for your suggestion. While I do think it might be valuable, I'm still thinking about this subject how we can provide actionable suggestions within this subject. So maybe we have to approach this by looking at specific examples, see if we can create a test, and actionable suggestion.

@mboelen mboelen self-assigned this Jan 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants