Enchanced Security

[szachovy]

⚠️ In the process

Security/Reliability improval ideas:

• SELinux, AppArmor, Seccomp extended
• Docker bench with trivy
• Cap adds/drops analysis
• OWASP

• Redis:
  • Check and implement official Redis setup tricks
  • Check and implement security models and features in Redis + research options redis.conf
• Superset:
  • Security configurations + research options
• Management:
  • Options for InnoDB Cluster with instances
  • Failover consistency
  • Auto-increment offset
  • Instances rejoin (higher up)
  • Add verifications
  • Reseach privileges and options + adjust router options
• MySQL:
  • Security guidelines
  • Making MySQL Secure Against Attackers
  • Loadable Function Security Precautions
  • Reseach on SSL options
  • Server Options, System Variables, and Status Variable References (validation reference)
  • Selinux
  • FIPS mode support
  • Backups with InnoDB specifics
  • InnoDB Data-at-Rest Encryption