Set of tools to help system administrator with maintenance and security of Debian systems.

guillaume 6533be1777 concierge-backup rewrite in python3, concierge-secaudit renamed to concierge-permaudit il y a 7 ans
doc b9e6ce6b7e concierge-backup: add ENCRYPTION support il y a 7 ans
src 6533be1777 concierge-backup rewrite in python3, concierge-secaudit renamed to concierge-permaudit il y a 7 ans
LICENSE 8d37b49033 add LICENSE file il y a 8 ans
README.md 4cc30f5645 add concierge-secaudit il y a 7 ans

README.md

Concierge is set of tools to help with the maintenance of Debian systems.

Upon installation, the package installs a daily cron task to validate the system's configuration.

Goals

Notify upon issues. Keep noise to a minimum. Keep configuration to a minimum.

Tools

concierge-backup

Create local and remote backups of directories and PostgreSQL databases.

Configuration: /etc/concierge/backup.cfg

Dependency: borgbackup

concierge-validate

Validate system configuration.

Configuration: none

concierge-secaudit

Audit filesystem permissions for possible security issues:

  • World-readable private keys (ssh, Let's Encrypt) and passwords (Git, SVN, Sympa, Dolibarr, ...)O
  • World-writable configuration files and scripts (/etc/init.d/*, /etc/profile, ...)
  • World-writable executable search path ($PATH), python search path, and perl include path

This tool only does file permissions checks, and does it imperfectly. You should not rely on this single tool for security auditing.

Configuration: none

concierge-status

Check system status.

Configuration: none