this post was submitted on 09 Jul 2026
17 points (90.5% liked)

Linux

14432 readers
450 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
17
Sparrow plugin to run compliance checks on Linux infrastructure (dev.to)
submitted 2 weeks ago by melezhik@programming.dev to c/linux@programming.dev
8 comments fedilink hide all child comments
 

Some times ago I posted about scc tool, here is a short update with some example reports provided. https://dev.to/melezhik/linux-compliance-checks-with-sparrow-plugin-2160

People can use the plugin to check if their Linux configuration files are security compliant

Sparrow is a Raku automation framework

you are viewing a single comment's thread
view the rest of the comments
[–] melezhik@programming.dev 1 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

This seems, at best, some general security checks but not mapped to any framework in particular.

So. Yes. Ssh access should be passwords only, etc. Some common sense. We don’t need standard to that

UPDATE: sorry for the typo, meant passwordless

[–] vk6flab@lemmy.radio 1 points 2 weeks ago (2 children)

Ssh access should be passwords only

What are you basing this on?

[–] fartsparkles@lemmy.world 4 points 2 weeks ago

Definitely not NIST 800-53, PCI-DSS, or ISO 27001; all of which stipulate ssh key management not password-based authentication.

[–] melezhik@programming.dev 1 points 2 weeks ago

Typo )) sorry , meant password less