Skip to content

Commit

Permalink
Merge develop into release/1.6.0 (#155)
Browse files Browse the repository at this point in the history
* docs(598): Update for SCDF limitation with application version and tag

* Replace COTS by FOSS upon Airbus request.
  • Loading branch information
nleconte-csgroup committed Aug 3, 2023
1 parent 09a6d00 commit a5a369f
Show file tree
Hide file tree
Showing 4 changed files with 15 additions and 15 deletions.
4 changes: 2 additions & 2 deletions CONFIG.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
> - definition of sufficient storage for services
> - high availability of services
>
> When adding an RS-ADDON / RS-CORE, the following COTS will need to be re-configured:
> When adding an RS-ADDON / RS-CORE, the following FOSS will need to be re-configured:
>
> - Storage size for Elasticsearch processing
> - Storage size for Elasticsearch security
Expand All @@ -29,7 +29,7 @@
- 2 Specific Workers for Prometheus (VM : 8 CPUs / 32 Go RAM)
- 2 Egress (VM : 4 CPUs / 16 Go RAM)

## Configuration of COTS
## Configuration of FOSS

| | |
| - | - |
Expand Down
4 changes: 2 additions & 2 deletions NOTICE.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,8 @@ This software is distributed under the Apache Software License (ASL) v2.0, see L
- The Grafana and Loki software are used with the AGPL License.
- The Ansible, ClamAV, OpenVPN, Suricata and Wazuh software are used with the GPL License.
- The OpenLDAP software is used with the OpenLDAP Public License.
Below are all the Commercial off-the-shelf (COTS) used and their respective licenses:

Below are all the FOSS (Free and open-source software) used and their respective licenses:

- Cert manager :
- Helm chart
Expand Down
2 changes: 1 addition & 1 deletion docs/architecture/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -868,7 +868,7 @@ Source : <https://grafana.com/docs/loki/latest/fundamentals/architecture/compone

#### Overview

The two most popular Logs Gathering Open Source are **Fluentd** and **Logstash**. We will therefore study these two COTS to determine which one best meets our expectations.
The two most popular Logs Gathering Open Source are **Fluentd** and **Logstash**. We will therefore study these two FOSS to determine which one best meets our expectations.

Fluentd and Logstash collect and transform events and logs from various data sources and writes them on several supports (files, databases NoSQL, ...).

Expand Down
20 changes: 10 additions & 10 deletions docs/user_manuals/how-to/Security.md
Original file line number Diff line number Diff line change
@@ -1,17 +1,17 @@
# Managing security COTS on the cluster's nodes
# Managing security FOSS on the cluster's nodes

The purpose of this document is to explain how to install and uninstall
security COTS on nodes.
security FOSS on nodes.

There are 5 COTS that are currently deployed in order to provide security to the infrastructure.
There are 5 FOSS that are currently deployed in order to provide security to the infrastructure.

- AuditD
- ClamAv
- Wazuh
- Suricata
- OpenVPN

According to the purpose of each COTS, the node where the installation is perfomed changes.
According to the purpose of each FOSS, the node where the installation is perfomed changes.

## Future improvements

Expand All @@ -23,7 +23,7 @@ According to the purpose of each COTS, the node where the installation is perfom
**Scope: `All`**

Auditd is the userspace component to the Linux Auditing System. It's responsible for writing audit records to the disk.
The COTS can be configured by updating the file : ```infrastructure/platform/roles/security/auditd/defaults/main.yml```
The FOSS can be configured by updating the file : ```infrastructure/platform/roles/security/auditd/defaults/main.yml```

| Name | Function | Required |
|------|----------|----------|
Expand All @@ -42,11 +42,11 @@ NB if one property is set, all properties must be set too otherwise the installa

**Scope: `gateways`**

The COTS can be configured by updating the file : ```infrastructure/platform/roles/security/clamav/defaults/main.yml`.
The FOSS can be configured by updating the file : ```infrastructure/platform/roles/security/clamav/defaults/main.yml`.

ClamAv is an antivirus controlled by systemd.
Rules bases are reloaded automatically by freshclam many times a day.
The version of this COTS can be edited in ```/platform/roles/security/clamav/default/main.yaml```
The version of this FOSS can be edited in ```/platform/roles/security/clamav/default/main.yaml```

| Name | Function | Required |
|------|----------|----------|
Expand All @@ -62,7 +62,7 @@ Clamav is decomposed in 3 modules:

**Scope: `The Manager is installed only on the first master node and agent that are installed on all remaining nodes.`**

The COTS can be configured by updating the file : ```infrastructure/platform/roles/security/wazuh/defaults/main.yml```
The FOSS can be configured by updating the file : ```infrastructure/platform/roles/security/wazuh/defaults/main.yml```
We strongly advise to use the lastest version of Wazuh as the version 3 and 4 are not the same. Using version 3, the playbook may not work.

| Name | Function | Required |
Expand All @@ -81,7 +81,7 @@ We strongly advise to use the lastest version of Wazuh as the version 3 and 4 ar
**Scope: `Gateway`**

Suricata is a NIDS that will reload rules every day to try to detect attack.
The COTS can be configured by updating the file : ```infrastructure/platform/roles/security/suricata/defaults/main.yml```
The FOSS can be configured by updating the file : ```infrastructure/platform/roles/security/suricata/defaults/main.yml```
As the Wazuh playbook, we strongly advise you to use the provided version in parameters as the install may not work otherwise.

| Name | Function | Required |
Expand Down Expand Up @@ -115,7 +115,7 @@ It is used to manage categories for ip reputation.
**Scope: `Gateway`**

OpenVpn client installed on gateway.
The COTS can be configured by updating the file : ```infrastructure/platform/roles/security/openvpn/defaults/main.yml```
The FOSS can be configured by updating the file : ```infrastructure/platform/roles/security/openvpn/defaults/main.yml```

| Name | Function | Required |
|------|----------|----------|
Expand Down

0 comments on commit a5a369f

Please sign in to comment.