30 lines
695 B
Python
30 lines
695 B
Python
#!/usr/bin/env python3
|
|
|
|
def sysctl() -> list:
|
|
sysctl = list()
|
|
|
|
# https://access.redhat.com/security/sysctl/sysctl-2023-0179
|
|
sysctl.append({
|
|
"cve": "cve-2023-0179",
|
|
"description": "",
|
|
"flag": "kernel.unprivileged_userns_clone",
|
|
"value": 0,
|
|
"level": "medium",
|
|
"affectedSystem": ({
|
|
'linux': "Debian",
|
|
'release': 'buster',
|
|
'kernel': '4.19.249-2'
|
|
})
|
|
})
|
|
|
|
# Best practice from CIS
|
|
sysctl.append({
|
|
"cve": "",
|
|
"description": "Disable IPv4 forwarding",
|
|
"flag": "net.ipv4.conf.all.forwarding",
|
|
"value": 0,
|
|
"level": "medium"
|
|
})
|
|
|
|
return sysctl
|