Enhancing Secure Deployment with Ansible: A Focus on Least Privilege and Automation for Linux - Archive ouverte HAL
Conference Papers Year : 2024

Enhancing Secure Deployment with Ansible: A Focus on Least Privilege and Automation for Linux

Abstract

As organisations increasingly adopt Infrastructure as Code (IaC), ensuring secure deployment practices becomes paramount. Ansible is a well-known open-source and modular tool for automating IT management tasks. However, Ansible is subject to supply-chain attacks that can compromise all managed hosts. This article presents a semi-automated process that improves Ansible-based deployments to have fine-grained control on administrative privileges granted to Ansible tasks. We describe the integration of the RootAsRole framework to Ansible. Finally, we analyse the limit of the current implementation.
No file

Dates and versions

hal-04663452 , version 1 (28-07-2024)

Identifiers

Cite

Eddie Billoir, Romain Laborde, Ahmad Samer Wazan, Yves Rutschle, Abdelmalek Benzekri. Enhancing Secure Deployment with Ansible: A Focus on Least Privilege and Automation for Linux. Workshop on Advances in Secure Software Deployments (ASOD 2024) @ ARES 2024: 19th International Conference on Availability, Reliability and Security, Jul 2024, Vienna, Austria. pp.1-7, ⟨10.1145/3664476.3670929⟩. ⟨hal-04663452⟩
76 View
0 Download

Altmetric

Share

More