Feature - AuTA should run security checks at startup and periodically

Description

Misconfigurations can severely impact the security of AuTA or the services residing on the same machine as AuTA. Examples include running the core as root or leaving the authentication database world-accessible.

Priority

Low - Common sense says that services should be properly isolated. Still, this is a nice-to-have because server administration can be wildly complicated.

Definition of done

  • AuTA should verify the security at startup and refuse to start if the system is not sufficiently secure
  • Periodic re-checks should continue to verify and warn about any violations
Assignee Loading
Time tracking Loading