Release 6 Blueprint Scanning Status

Release 6 Blueprint Scanning Status

Approved Blueprints

Project Name

Vuls Scan

  • Pass/Fail

  • Exceptions

Lynis Scan

  • Pass/Fail

  • Exceptions

Kube-Hunter Scan

  • Pass/Fail

  • Exceptions

Project Name

Vuls Scan

  • Pass/Fail

  • Exceptions

Lynis Scan

  • Pass/Fail

  • Exceptions

Kube-Hunter Scan

  • Pass/Fail

  • Exceptions

1

Smart Data Transaction for CPS

See results here

Logs: https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-vuls/2/

Exceptions requested for the following:

CVE-2016-1585
CVE-2021-20236
CVE-2021-31870
CVE-2021-31872
CVE-2021-31873
CVE-2021-33574
CVE-2021-45951
CVE-2021-45952
CVE-2021-45953
CVE-2021-45954
CVE-2021-45955
CVE-2021-45956
CVE-2021-45957
CVE-2022-23218
CVE-2022-23219
CVE-2016-9180
CVE-2021-35942

Exception Requests

Passing incubation criteria

See results here

Logs: https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/2/

Pass

*1 Test case failure due to suspected tool issue

See results here

Logs: https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/

2

Integrated Cloud Native NFV/App stack family (Short term: ICN)

See results here

Exceptions requested for the following:

  • CVE-2021-33574

  • CVE-2019-19814

  • CVE-2021-35942

Exception requests

 

See results here

Exceptions requested for the following:

  • BOOT-5122: GRUB boot password interferes with the unattended reboot during OS provisioning.

  • USB-2000: USB hubs and HID device must be enabled for BMC Console Redirection.

  • SSH-7408: MaxSessions of 2 prevents lynis from running under Bluval.  Lynis, etc. robot files need to be updated to handle a different port.

  • KRNL-6000: Kernel module loading required by accelerator drivers.  Forwarding required by k8s.

See results here

Pass

3

IEC Type 5: SmartNIC for Integrated Edge Cloud (IEC) Blueprint Family

See results here

Exceptions requested for the following:

CVE-2021-43527
CVE-2014-9939
CVE-2015-4042
CVE-2022-22822
CVE-2022-22823
CVE-2022-22824
CVE-2022-23852
CVE-2022-25235
CVE-2022-25236
CVE-2022-25315

See results here

Exceptions requested for the following:

  • BOOT-5122: GRUB boot password interferes with the unattended reboot during OS provisioning.

  • USB-2000: USB hubs and HID device must be enabled for BMC Console Redirection.

  • Performing test ID HRDN-7220  already exists 

See results here

We are not using Kubernets, so we do not need to do a Kube-Hunter scan.

4

 

 

 

 

5

 

 

 

 

6

 

 

 

 

7

 

 

 

 

8

 

 

 

 

9

 

 

 

 

10

 

 

 

 

11

 

 

 

 

12

 

 

 

 

13

 

 

 

 

14

 

 

 

 

15

 

 

 

 

16

 

 

 

 

17

 

 

 

 

18

 

 

 

 

19

 

 

 

 

20

 

 

 

 

21

 

 

 

 

22

 

 

 

 

23

 

 

 

 

24

 

 

 

 

25

 

 

 

 

26

 

 

 

 

27

 

 

 

 

28

 

 

 

 

29

 

 

 

 

30

 

 

 

 

31

 

 

 

 

32