Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Approved Blueprints


Project Name

Vuls Scan

  • Pass/Fail
  • Exceptions

Lynis Scan

  • Pass/Fail
  • Exceptions

Kube-Hunter Scan

  • Pass/Fail
  • Exceptions
1

Smart Data Transaction for CPS

See results here

Logs: https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-vuls/2/

Exceptions requested for the following:

CVE-2016-1585
CVE-2021-20236
CVE-2021-31870
CVE-2021-31872
CVE-2021-31873
CVE-2021-33574
CVE-2021-45951
CVE-2021-45952
CVE-2021-45953
CVE-2021-45954
CVE-2021-45955
CVE-2021-45956
CVE-2021-45957
CVE-2022-23218
CVE-2022-23219
CVE-2016-9180
CVE-2021-35942

Exception Requests

Passing incubation criteria

See results here

Logs: https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/2/

Pass

*1 Test case failure due to suspected tool issue

See results here

Logs: https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/

2Integrated Cloud Native NFV/App stack family (Short term: ICN)

See results here

Exceptions requested for the following:

  • CVE-2021-33574
  • CVE-2019-19814
  • CVE-2021-35942

Exception requests


See results here

Exceptions requested for the following:

  • BOOT-5122: GRUB boot password interferes with the unattended reboot during OS provisioning.
  • USB-2000: USB hubs and HID device must be enabled for BMC Console Redirection.
  • SSH-7408: MaxSessions of 2 prevents lynis from running under Bluval.  Lynis, etc. robot files need to be updated to handle a different port.
  • KRNL-6000: Kernel module loading required by accelerator drivers.  Forwarding required by k8s.

See results here

Pass

3

IEC Type 5: SmartNIC for Integrated Edge Cloud (IEC) Blueprint Family

See results here

Exceptions requested for the following:

CVE-2021-43527
CVE-2014-9939
CVE-2015-4042
CVE-2022-22822
CVE-2022-22823
CVE-2022-22824
CVE-2022-23852
CVE-2022-25235
CVE-2022-25236
CVE-2022-25315

See results here

Exceptions requested for the following:

  • BOOT-5122: GRUB boot password interferes with the unattended reboot during OS provisioning.
  • USB-2000: USB hubs and HID device must be enabled for BMC Console Redirection.
  • SSH-7408: MaxSessions of 2 prevents lynis from running under Bluval.  Lynis, etc. robot files need to be updated to handle a different port.

See results here

We are not using Kubernets, so we do not need to do a Kube-Hunter scan.

4



5



6



7



8



9



10



11



12



13



14



15



16



17



18



19



20



21



22



23



24



25



26



27



28



29



30



31



32



...