Security Office. Reduce privilege and protect the delivery chain.
3 labs, easiest first0 / 3
A password on the public websiteSEC-91An external scanner reports that the depot's public website serves a file with a database password in it. The access log says someone already downloaded it.EasyIncident 25 min · Linux
Who can still log in as deploy?SEC-93The access review for the deploy account is overdue. Its authorized_keys file has been edited by hand since 2025, and nobody is sure whose keys are in it.EasyFix 25 min · Linux
The deploy account is root in all but nameSEC-95An audit found that the deploy account may run anything as root. It only ever needs to restart Waybill and check its status.MediumFix 30 min · Linux, root
