tickets #160104: State of kali.i.o.o - openSUSE admin - openSUSE Project Management Tool

Actions

Copy link

tickets #160104

closed

State of kali.i.o.o

Added by crameleon about 2 months ago. Updated about 1 month ago.

Status:

Resolved

Priority:

Normal

Assignee:

crameleon

Category:

Servers hosted in PRG

Target version:

Start date:

2024-05-09

Due date:

% Done:

Estimated time:

Description

Hi,

investigation of spurious network traffic led me to kali.infra.opensuse.org. Reaching a shell through the serial console, I find the machine to have a high uptime - given the rather interesting operating system containing "rolling" in its description this is leads me to believe no updates were recently installed either.
The last login was in November (which was probably myself when I changed the IP address during the DC migration).

Since this machine is not enrolled in Salt, does not seem to have any services for automatic maintenance configured, and is not running an up to date operating system, I think of it to be in violation with our infrastructure policy: https://en.opensuse.org/openSUSE:Infrastructure_policy.

Please advise if the issues can be mitigated or if the machine should be decommissioned.

Thanks!
Georg

Actions

Copy link

Updated by cboltz about 2 months ago

The idea was to have an easy way to scan the infrastructure for security issues etc.

Looking at the last login date you mentioned, obviously nobody does that, which makes the kali VM somewhat superfluous. Personally, I don't have any objections against shutting it down.

However, see https://progress.opensuse.org/issues/114860 comment 2 (from two years ago, I'm not sure if it's still valid).

Actions

Copy link

Updated by lrupp about 2 months ago

I was using kali in the past to check the vulnerability of our infra.o.o network.

As this is handled differently today and I stepped back from the heroes long time ago, I guess that this machine just fell of the radar.

Feel free to decommission the machine.

Note: If you like to keep some old security reports, feel free to backup the postgresql database (used by openVAS) - but IMHO it does not make much sense, after all the recent changes.

Actions

Copy link