|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
# I do not know about any better place where to put profile files
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
addFilter(r'openssh-askpass.x86_64: W: non-conffile-in-etc /etc/profile.d/gnome-ssh-askpass.c?sh')
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
# The ssh-keysign is not supposed to have standard permissions
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
addFilter(r'openssh.x86_64: E: non-standard-executable-perm /usr/libexec/openssh/ssh-keysign 2555')
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
addFilter(r'openssh.x86_64: E: setgid-binary /usr/libexec/openssh/ssh-keysign ssh_keys 2555')
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
addFilter(r'openssh.x86_64: W: non-standard-gid /usr/libexec/openssh/ssh-keysign ssh_keys')
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
# The -cavs subpackage is internal without documentation
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
# The -askpass is not intended to be used directly so it is missing documentation
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
addFilter(r'openssh-(askpass|cavs).x86_64: W: no-documentation')
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
# sshd config and sysconfig is not supposed to be world readable
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
addFilter(r'non-readable /etc/(ssh/sshd_config|sysconfig/sshd)')
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
|
|
![](https://seccdn.libravatar.org/avatar/e24db70f13c9234386da91c895f555217fb9331ad6474f4f4923f22271450015?s=16&d=retro) |
a886069 |
# /usr/share/empty.sshd is required to have the given permissions
|
|
![](https://seccdn.libravatar.org/avatar/e24db70f13c9234386da91c895f555217fb9331ad6474f4f4923f22271450015?s=16&d=retro) |
a886069 |
addFilter(r'non-standard-dir-perm /usr/share/empty.sshd 711')
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
# Spelling false-positives
|
|
![](https://seccdn.libravatar.org/avatar/bc84285c5ca7a993e6013b3df0cd5c6239503a336104c5aa0ee7e4edc788fe90?s=16&d=retro) |
e9a555f |
addFilter(r'spelling-error (Summary\(en_US\)|.* en_US) (mls|su|sudo|rlogin|rsh|untrusted) ')
|