Introduce the SecurityAgent, which assesses and enforces system security

Description

Adds a Security Agent to the system, which performs regular security checks:

• The user running AuTA may not be root
• The authentication database should not be world-accessible (any of rwx)
• The authentication database should not be executable by anyone
• The default privileged user's passwords should be changed

Changes

None.

Additions

• The SecurityAgent service
• The system now performs an initial security check before it allows workers to connect
• Repeated checks happen every 30 minutes
• A hasUser method for the database which is slightly faster than full user queries

Test and Review

Closes #128 (closed)

To be filled in by the reviewers

• All of the methods are commented to expectation

• The methods are tested to satisfaction

• There are no unnecessary files present in the MR

• The continuous integration has no problems with the MR

• The MR is filled in as requested (including labels, milestones, and reviewers)

• The documentation is up-to-date

• All nullable parameters are marked as such

changed milestone to %GDPR compliance

added 1 deleted label

added 1 commit

• 14e55039 - Make the rootness check more explicit

Compare with previous version

added 2 commits

• d1ec650b - Make the security check interval configurable
• ab44d157 - Test the security agent

Compare with previous version

unmarked as a Work In Progress

changed the description

marked the checklist item All of the methods are commented to expectation as completed

marked the checklist item The methods are tested to satisfaction as completed

marked the checklist item There are no unnecessary files present in the MR as completed

marked the checklist item The continuous integration has no problems with the MR as completed

marked the checklist item The MR is filled in as requested (including labels, milestones, and reviewers) as completed

marked the checklist item All nullable parameters are marked as such as completed

approved this merge request

resolved all discussions

Documentation here: https://gitlab.ewi.tudelft.nl/eip/code-measures/wikis/security#security-agent

approved this merge request

marked the checklist item The documentation is up-to-date as completed

added 9 commits

• ab44d157...f1d00895 - 8 commits from branch development
• 9b42e9e9 - Merge branch 'development' into 'system-security'

Compare with previous version

approved this merge request

approved this merge request

mentioned in commit 85e03568

merged