Mature Blueprints
Blueprints Participating Maturity Review
| No. | Project Name | PTL | Main Committer | Self-Certification Page | Documentation Sub-Committee | Security Logs (Vuls, Lynis, KubeHunter, no need CD log) | Security Sub-Committee Randy Stricklin Daniil Egranov Wenhui Zhang Exception requests should be filed at: Maturity Blueprints: Akraino CVE and KHV Vulnerability Exception Request | ||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Maturity Review performed over e-mail on May 5th, 2021. Link to the overview: 2021 year | https://nexus.akraino.org/content/sites/logs/baidu/job/security_scan/aiedge/4/result/ | |||||||||
| 2 | IEC Type 2 for Integrated Edge Cloud (IEC) Blueprint Family | ||||||||||
| 3 | |||||||||||
| 4 | IEC Type 5: SmartNIC for Integrated Edge Cloud (IEC) Blueprint Family | Fu LiEALT-EDGE | Boren Zhang | Maturity Review Certification of SmartNICEALTEdge | Documentation Review Meeting notes | https://nexus.akraino.org/content/sites/logs/socnochuawei/job/security_scan/
Vuls.log with the test results is missing
Lynis failures: Performing test ID BOOT-5122 (Check for GRUB boot password): NOT PRESENT IN THIS LOG Performing test ID BOOT-5184 (Check permissions for boot files/scripts): FAILED Test: Checking presence /var/run/reboot-required.pkgs: FAILED Performing test ID AUTH-9228 (Check password file consistency with pwck): FAILED Performing test ID AUTH-9229 (Check password hashing methods): NOT PRESENT IN THIS LOG Test: Checking SHA_CRYPT_{MIN,MAX}_ROUNDS option in /etc/login.defs: NOT PRESENT IN THIS LOG Test: Checking PASS_MAX_DAYS option in /etc/login.defs: FAILED Test: collecting accounts which have an expired password (last day changed + maximum change time): FAILED Performing test ID AUTH-9328 (Default umask values): FAILED Performing test ID FILE-6368 (Checking ACL support on root file system): FAILED Performing test ID USB-2000 (Check USB authorizations): NOT PRESENT IN THIS LOG Performing test ID USB-3000 (Check for presence of USBGuard): FAILED Performing test ID PKGS-7370 (Checking for debsums utility): NOT PRESENT IN THIS LOG Performing test ID PKGS-7388 (Check security repository in apt sources.list file): NOT PRESENT IN THIS LOG Performing test ID SSH-7408 (Check SSH specific defined options): FAILED Test: Checking AllowTcpForwarding in /tmp/lynis.: FAILED Test: Checking ClientAliveCountMax in /tmp/lynis.: FAILED Test: Checking ClientAliveInterval in /tmp/lynis.: FAILED Test: Checking FingerprintHash in /tmp/lynis.: FAILED Test: Checking IgnoreRhosts in /tmp/lynis.: FAILED Test: Checking MaxAuthTries in /tmp/lynis.: FAILED Test: Checking MaxSessions in /tmp/lynis.: FAILED Test: Checking StrictModes in /tmp/lynis.: FAILED Test: Checking TCPKeepAlive in /tmp/lynis.: FAILED Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): NOT PRESENT IN THIS LOG Test: checking for file /etc/network/if-up.d/ntpdate: FAILED Performing test ID KRNL-6000 (Check sysctl key pairs in scan profile): FAILED Test: Check if one or more compilers can be found on the system: FAILED Kube-Hunter failures: KHV002 - Kubernetes version disclosure | 6/8/2023 | 06/26/2023 | 07/20/2023 |
Records of Details
| No. | Project Name | PTL | Main Committer | Self-Certification Page | Documentation Sub-Committee | Logs (Vuls, Lynis, KubeHunter) | Security Sub-Committee | Process Sub-Committee | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | Maturity Review Certification of Federated ML Application At Edge Blueprint performed over mail on 01/04 & stored at Documentation Sub-committee reviews for 2022. It is recommended to Akraino TSC to deem the maturity requirements for Documentation to "mature" level as fulfilled and accept the BP graduation request to "Mature" level. | 2/28/2022 Update |
| Approved by Process Sub-Commitee. | |||||
| 2 | IEC Type 3: Android cloud native applications on Arm servers in edge for Integrated Edge Cloud (IEC) Blueprint Family | Maturity Review Certification of Android Cloud | Documentation Review Meeting notes | https://nexus.akraino.org/content/sites/logs/ysemi/job/v2/lynis_v3/lynis/
|
Approved by Security Sub-Committee. |
Approved by Process Sub-Commitee. | Approved by TSC | ||
| 3 | Smart Cities | Maturity Review Certification of Smart Cities | Documentation Review Meeting notes |
https://nexus.akraino.org/content/sites/logs/myais/bluval/6/ |
Approved by Security Sub-Committee. |
Approved by Process Sub-Commitee. | |||
| 4 | IEC Type 5: SmartNIC for Integrated Edge Cloud (IEC) Blueprint Family | Maturity Review Certification of SmartNIC | Documentation Review Meeting notes | https://nexus.akraino.org/content/sites/logs/socnoc/job/security_scan/ |
Approved by Security Sub-Committee. | ||||
| 5 | EALT-EDGE | Boren Zhang | Maturity Review Certification of EALTEdge | https://nexus.akraino.org/content/sites/logs/huawei/job/Security-logs/ | 2023/6/8 Approved by Security Sub-Committee.
Lynus: Performing test ID BOOT-5184 (Check permissions for boot files/scripts): FAILED Note: Please add links to the Vuls and Kube-hunter logs. | 06/26/2023 | 07/20/2023 | ||