Page MenuHomeVyOS Platform
Create Task
Maniphest T4712

Collaborative Protection Profile cPP for Network Devices root task
In progress, HighPublicFEATURE REQUEST
Actions

Description

This Protection Profile (PP), describes security requirements for a Network Device (defined to be an infrastructure device that can be connected to a network), is intended to provide a minimal, baseline set of requirements that are targeted at mitigating well defined and described threats

https://www.commoncriteriaportal.org/files/ppfiles/CPP_ND_V2.2E.pdf
https://www.niap-ccevs.org/MMO/PP/cpp_nd_v2.2e-map.pdf
https://www.niap-ccevs.org/MMO/PP/MOD_CPP_FW_v1.4e.pdf

Examples from other systems
https://www.oracle.com/a/ocom/docs/oracle-linux-v7.6-common-criteria-guidance-v1.7.pdf
https://www.oracle.com/a/ocom/docs/oracle-linux-v8.4-common-criteria-guidance.pdf
https://links.imagerelay.com/cdn/3404/ql/0994204932a54966978e4d524bffb4dc/common-criteria-eal4plus-evaluated-configuration-guide-for-suse-linux-enterprise-server-15-sp2.pdf
https://ubuntu.com/security/cc
https://documentation.extremenetworks.com/networkos/SW/60x/nos_602_Common_Criteria.pdf
https://trustm3.github.io/certification/

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Related Objects
Search...

Event Timeline

Viacheslav created this task.Sep 27 2022, 9:04 AM
Viacheslav added a subtask: T4711: Ability to terminate user TTY and PTS sessions.
Viacheslav changed the status of subtask T4715: Auto logout user after a period of inactivity from Open to In progress.Sep 27 2022, 10:51 AM
Viacheslav changed the status of subtask T4711: Ability to terminate user TTY and PTS sessions from Open to In progress.Sep 27 2022, 12:29 PM
fernando added a subscriber: fernando.Sep 27 2022, 2:00 PM
Viacheslav closed subtask T4711: Ability to terminate user TTY and PTS sessions as Resolved.Sep 27 2022, 2:16 PM
Viacheslav changed the status of subtask T4716: SSH ability to configure RekeyLimit from Open to In progress.Sep 27 2022, 4:11 PM
syncer changed the task status from Open to In progress.Sep 28 2022, 11:56 AM
syncer triaged this task as High priority.
pasik added a subscriber: pasik.Sep 28 2022, 1:14 PM
Viacheslav closed subtask T4715: Auto logout user after a period of inactivity as Resolved.Sep 29 2022, 5:00 PM
Viacheslav changed the status of subtask T4716: SSH ability to configure RekeyLimit from In progress to Needs testing.Oct 10 2022, 7:33 PM
Viacheslav closed subtask T4716: SSH ability to configure RekeyLimit as Resolved.Oct 13 2022, 11:57 AM
Viacheslav changed the status of subtask T4720: Ability to configure SSH HostKeyAlgorithms from Open to In progress.Oct 17 2022, 12:24 PM
Viacheslav updated the task description. (Show Details)Oct 17 2022, 2:12 PM
Viacheslav changed the status of subtask T4720: Ability to configure SSH HostKeyAlgorithms from In progress to Needs testing.Oct 20 2022, 3:27 PM
Viacheslav closed subtask T4720: Ability to configure SSH HostKeyAlgorithms as Resolved.Oct 25 2022, 5:01 PM
c-po reopened subtask T4720: Ability to configure SSH HostKeyAlgorithms as Needs testing.Nov 1 2022, 8:03 AM
Viacheslav closed subtask T4720: Ability to configure SSH HostKeyAlgorithms as Resolved.Nov 19 2022, 4:00 PM
Viacheslav added a subtask: T5046: CLI for password complexity enforcement PAM module.Mar 2 2023, 4:36 PM
erkin changed the status of subtask T5046: CLI for password complexity enforcement PAM module from Open to In progress.Mar 9 2023, 2:42 PM
Viacheslav changed the status of subtask T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events. from Open to In progress.Apr 4 2023, 11:03 AM
Viacheslav updated the task description. (Show Details)Apr 4 2023, 11:19 AM
Viacheslav changed the status of subtask T5145: Add maxsyslogins maximum number of all logins on system from Open to In progress.Apr 4 2023, 12:56 PM
Viacheslav changed the status of subtask T5145: Add maxsyslogins maximum number of all logins on system from In progress to Needs testing.Apr 4 2023, 5:30 PM
Viacheslav closed subtask T5145: Add maxsyslogins maximum number of all logins on system as Resolved.Apr 5 2023, 11:13 AM
Viacheslav changed the status of subtask T5146: Show recent login of all users from Open to In progress.Apr 5 2023, 3:57 PM
Viacheslav closed subtask T5142: One of the requirements is to use a system auditing tool to monitor and log all security-relevant events. as Resolved.Apr 6 2023, 6:48 AM
Viacheslav closed subtask T5146: Show recent login of all users as Invalid.Apr 6 2023, 8:30 AM
syncer claimed this task.Jul 16 2023, 7:41 PM
Viacheslav added a project: VyOS 1.5 Circinus.Sep 1 2023, 12:51 PM
Apachez added a subscriber: Apachez.Sep 4 2023, 6:28 PM

Might be related:

Result of system audit by Lynis
https://vyos.dev/T5549

syncer reassigned this task from syncer to Viacheslav.Oct 19 2023, 6:59 PM
syncer added a subscriber: syncer.
Viacheslav updated the task description. (Show Details)Fri, Nov 10, 10:54 AM