View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0000367NixGeneralpublic2026-09-27 00:572026-09-27 00:57
Reporterimmae Assigned Toimmae  
PrioritynormalSeverityminorReproducibilityN/A
Status assignedResolutionopen 
Summary0000367: Protect all systemd services
Description

Timers and dependencies also need to be checked independently

    UNIT                                               EXPOSURE PREDICATE HAPPY                                                                                                                                                                
    tinc-Immae.service                                      9.6 UNSAFE    😨                                                                                                                                                                   
    git-daemon.service                                      9.6 UNSAFE    😨                                                                                                                                                                   
    saslauthd.service                                       9.6 UNSAFE    😨                                                                                                                                                                   
    stunnel.service                                         9.6 UNSAFE    😨                                                                                                                                                                   
    proftpd.service                                         9.6 UNSAFE    😨                                                                                                                                                                   
    zrepl.service                                           9.6 UNSAFE    😨                                                                                                                                                                   
    ympd.service                                            9.6 UNSAFE    😨                                                                                                                                                                   
    sshd.service                                            9.6 UNSAFE    😨                                                                                                                                                                   
    cron.service                                            9.6 UNSAFE    😨                                                                                                                                                                   
    mdmonitor.service                                       9.5 UNSAFE    😨
    container@httpd-integration.service                     9.4 UNSAFE    😨
    container@httpd-production.service                      9.4 UNSAFE    😨
    httpd.service                                           9.3 UNSAFE    😨
    milter_verify_from.service                              9.2 UNSAFE    😨
    spiped_redis.service                                    9.2 UNSAFE    😨
    opendmarc.service                                       9.2 UNSAFE    😨
    imgproxy.service                                        9.2 UNSAFE    😨
    ejabberd.service                                        9.2 UNSAFE    😨
    commento.service                                        9.2 UNSAFE    😨
    openarc.service                                         9.2 UNSAFE    😨
    tt-rss.service                                          9.2 UNSAFE    😨
    surfer.service                                          9.2 UNSAFE    😨
    naemon.service                                          9.2 UNSAFE    😨
    paste.service                                           9.2 UNSAFE    😨
    wwsympa.service                                         8.9 EXPOSED   🙁
    mediagoblin-celeryd.service                             8.8 EXPOSED   🙁
    cryptpad-immaeEu.service                                8.8 EXPOSED   🙁
    mediagoblin-web.service                                 8.8 EXPOSED   🙁
    diaspora.service                                        8.8 EXPOSED   🙁
    dbus-broker.service                                     8.7 EXPOSED   🙁
    sympa-archive.service                                   8.6 EXPOSED   🙁
    sympa-bounce.service                                    8.6 EXPOSED   🙁
    sympa-task.service                                      8.6 EXPOSED   🙁
    sympa-bulk.service                                      8.6 EXPOSED   🙁
    sympa.service                                           8.6 EXPOSED   🙁
    terraforming-mars.service                               8.2 EXPOSED   🙁
    codenames_api.service                                   8.2 EXPOSED   🙁
    taskserver.service                                      8.2 EXPOSED   🙁
    bitlbee.service                                         8.2 EXPOSED   🙁
    nscd.service                                            8.2 EXPOSED   🙁
    epmd.service                                            8.2 EXPOSED   🙁
    openldap.service                                        7.1 MEDIUM    😐
    etherpad-lite.service                                   7.0 MEDIUM    😐
    mpd.service                                             6.9 MEDIUM    😐
    postfix.service                                         6.1 MEDIUM    😐
    fail2ban.service                                        5.8 MEDIUM    😐
    stargazer.service                                       4.8 OK        🙂
    ntfy-sh.service                                         4.0 OK        🙂
    mysql.service                                           4.0 OK        🙂
    dovecot.service                                         3.5 OK        🙂
    mastodon-streaming.service                              2.7 OK        🙂
    mastodon-sidekiq.service                                2.7 OK        🙂
    mastodon-web.service                                    2.7 OK        🙂
    peertube.service                                        2.7 OK        🙂
    dhcpcd.service                                          1.9 OK        🙂
    rspamd.service                                          1.7 OK        🙂
    bind.service                                            1.5 OK        🙂
    redis-php-sessions.service                              1.3 OK        🙂
    redis-peertube.service                                  1.3 OK        🙂
    postgresql.service                                      1.3 OK        🙂
    redis.service                                           1.3 OK        🙂
    galene_lfoc.service                                     1.2 OK        🙂
    opendkim.service                                        1.2 OK        🙂
    galene.service                                          1.2 OK        🙂
    coturn.service                                          1.1 OK        🙂
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2026-09-27 00:57 immae New Issue
2026-09-27 00:57 immae Status new => assigned
2026-09-27 00:57 immae Assigned To => immae
2026-09-27 00:57 immae Tâche créée => tinc-Immae.service 9.6 UNSAFE
2026-09-27 00:57 immae Tâche créée => git-daemon.service 9.6 UNSAFE
2026-09-27 00:57 immae Tâche créée => saslauthd.service 9.6 UNSAFE
2026-09-27 00:57 immae Tâche créée => stunnel.service 9.6 UNSAFE
2026-09-27 00:57 immae Tâche créée => proftpd.service 9.6 UNSAFE
2026-09-27 00:57 immae Tâche créée => zrepl.service 9.6 UNSAFE
2026-09-27 00:58 immae Tâche créée => ympd.service 9.6 UNSAFE
2026-09-27 00:58 immae Tâche créée => sshd.service 9.6 UNSAFE
2026-09-27 00:58 immae Tâche créée => cron.service 9.6 UNSAFE
2026-09-27 00:58 immae Tâche créée => mdmonitor.service 9.5 UNSAFE
2026-09-27 00:58 immae Tâche créée => container@httpd-integration.service 9.4 UNSAFE
2026-09-27 00:58 immae Tâche créée => container@httpd-production.service 9.4 UNSAFE
2026-09-27 00:58 immae Tâche créée => httpd.service 9.3 UNSAFE
2026-09-27 00:58 immae Tâche créée => milter_verify_from.service 9.2 UNSAFE
2026-09-27 00:58 immae Tâche créée => spiped_redis.service 9.2 UNSAFE
2026-09-27 00:58 immae Tâche créée => opendmarc.service 9.2 UNSAFE
2026-09-27 00:59 immae Tâche créée => imgproxy.service 9.2 UNSAFE
2026-09-27 00:59 immae Tâche créée => ejabberd.service 9.2 UNSAFE
2026-09-27 00:59 immae Tâche créée => commento.service 9.2 UNSAFE
2026-09-27 00:59 immae Tâche créée => openarc.service 9.2 UNSAFE
2026-09-27 01:00 immae Tâche créée => tt-rss.service 9.2 UNSAFE
2026-09-27 01:00 immae Tâche créée => surfer.service 9.2 UNSAFE
2026-09-27 01:00 immae Tâche créée => naemon.service 9.2 UNSAFE
2026-09-27 01:00 immae Tâche créée => paste.service 9.2 UNSAFE
2026-09-27 01:02 immae Tâche créée => Traiter Exposed / Medium / OK