Enhancing Secure Deployment with Ansible: A Focus on Least Privilege and Automation for Linux - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2024

Enhancing Secure Deployment with Ansible: A Focus on Least Privilege and Automation for Linux

Ahmad Samer Wazan
Yves Rutschle

Résumé

As organisations increasingly adopt Infrastructure as Code (IaC), ensuring secure deployment practices becomes paramount. Ansible is a well-known open-source and modular tool for automating IT management tasks. However, Ansible is subject to supply-chain attacks that can compromise all managed hosts. This article presents a semi-automated process that improves Ansible-based deployments to have fine-grained control on administrative privileges granted to Ansible tasks. We describe the integration of the RootAsRole framework to Ansible. Finally, we analyse the limit of the current implementation.
Fichier non déposé

Dates et versions

hal-04663452 , version 1 (28-07-2024)

Identifiants

Citer

Eddie Billoir, Romain Laborde, Ahmad Samer Wazan, Yves Rutschle, Abdelmalek Benzekri. Enhancing Secure Deployment with Ansible: A Focus on Least Privilege and Automation for Linux. ASOD@ARES 2024, Jul 2024, Vienna Austria, France. pp.1-7, ⟨10.1145/3664476.3670929⟩. ⟨hal-04663452⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More