/usr/share/yasat/plugins/yasat_global.advice is in yasat 526-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 | EN,GLOBAL_MULTIPLE_DECLARATIONS=Unable to discern which declaration is really used
EN,GLOBAL_FILE_CHMOD640=This file must be chmoded 640 or 600
<div class="command">chmod 640 <i>filename</i></div>
ADVICEEND
EN,GLOBAL_FILE_CHMOD600=This file must be chmoded 600
<div class="command">chmod 600 <i>filename</i></div>
ADVICEEND
EN,GLOBAL_FILE_MUST_BE_OWNED_BY_ROOT=This file must be owned by the root user
EN,GLOBAL_FILE_MUST_BE_GROUPED_BY_ROOT=This file must be group owned by the root user (root or wheel)
EN,GLOBAL_FILE_OTHER_WRITABLE=Do a chmod o-w <i>name_of_the_file</i>
EN,GLOBAL_FILE_OTHER_READABLE=Do a chmod o-rxw <i>name_of_the_file</i>
EN,GLOBAL_INTERNAL_ERROR=Internal error, probably a bug
EN,GLOBAL_SKIPPED_LONG_TESTS=Long tests skipped, use -f to include them
EN,YASAT_BUG=Argg a bug, please report it.
EN,YASAT_DENIED=You got a permission denied, are you root ?
EN,CERTIFICATE_OUTDATED=This certificate will outdated soon.
EN,GLOBAL_PACKAGE_INSTALLED_AT_HAND=Why have you installed this package manually ?
Installing software from manually is not recommended, because you have to do all
patch management your self. (no security patch tracking)
ADVICEEND
EN,GLOBAL_PRIVATE_KEY_NOT_PASSWORD_PROTECTED=Password protect you private key
openssl rsa -in nopassword.key -des3 -out password.key
You will be prompted for a passphrase.
-des3 could be replaced by -aes128, -aes192, or -aes256 if you want a stronger cipher for encryption.
ADVICEEND
EN,GLOBAL_RSA_KEY_SIZE=RSA keys must be 2048bits at minimum
see <a href="http://www.openssl.org/docs/HOWTO/keys.txt">http://www.openssl.org/docs/HOWTO/keys.txt</a>
ADVICEEND
EN,GLOBAL_BINARY_PIE=TODO
See <a href="http://www.gentoo.org/proj/en/hardened/pie-ssp.xml">http://www.gentoo.org/proj/en/hardened/pie-ssp.xml</a>
<a href="http://www.gentoo.org/proj/en/hardened/hardened-toolchain.xml">http://www.gentoo.org/proj/en/hardened/hardened-toolchain.xml</a>
ADVICEEND
EN,GLOBAL_BINARY_SSP=TODO
See <a href="http://www.gentoo.org/proj/en/hardened/pie-ssp.xml">http://www.gentoo.org/proj/en/hardened/pie-ssp.xml</a>
<a href="http://www.gentoo.org/proj/en/hardened/hardened-toolchain.xml">http://www.gentoo.org/proj/en/hardened/hardened-toolchain.xml</a>
ADVICEEND
|