Halaman utama Jelajahi Bantuan
Masuk
noah
/
videopc-infra
1
0
Fork 0
Berkas Masalah 0 Permintaan Tarik 0 Wiki

an IaC solution for seamless projector control in production environments

Pohon: c4265c614e
Ranting Tag
videopc-infra
ZIP TAR.GZ
Noah Vogt c4265c614e escape slashes in sed expression 1 tahun lalu
dot-config f3ad4ed62d minify kitty config + fix tpm package name 1 tahun lalu
local-bin 4df57cabf8 add security considerations + remove unused code made for hid interaction 1 tahun lalu
LICENSE 2017c36f62 clean history commit 1 tahun lalu
README.md 4df57cabf8 add security considerations + remove unused code made for hid interaction 1 tahun lalu
apply-dotfiles ac46dc345d migrate dotfiles here 1 tahun lalu
chroot.sh a258e42452 readd microsoft keys for oprom 1 tahun lalu
stage1.sh f3ad4ed62d minify kitty config + fix tpm package name 1 tahun lalu
stage2.sh c4265c614e escape slashes in sed expression 1 tahun lalu

README.md

Security Considerations

  • boot security
    • add BIOS password
    • use motherboard with TPM2.0 and BIOS password not stored in volatile memory
    • use secure boot
    • use full disk encryption with TPM keys
    • disable unneeded device ports in BIOS
  • prevent user input
    • blacklist all HID modules
      • usb
      • serial decies /dev/tty* (or more fine-grained) using a udev rule
    • disable unneeded device ports in software
  • prevent leakage through network
    • use https
      • use a self-signed certificate as to not worry about expiration
    • use firewall to block all ports except the two needed
  • vulnerabilty exploits
    • reduce software stack
    • apply some hardening
    • add update schedule