Skip to content

Latest commit

 

History

History
43 lines (34 loc) · 1.65 KB

SECURITY.md

File metadata and controls

43 lines (34 loc) · 1.65 KB
Raw

Werkstatt Tools

Security Python module for Werkstatt projects

Core functions for integrating with solutions using Python

  • Encryption of credential

Core Libraries and purpose

  • werkstatt_security encrypt the cleartext passwords

Dependencies

  • Basic Libraries
  • Cryptodome

Solutions leveraging the base tools

Solution API Python
Werkstatt Tools ⬜ ✅
  • ✅ — Supported
  • 🔶 — Partial support
  • 🚧 — Under development
  • ⬜ - N/A ️

ToDO:

  • Initial Core Development
  • update custom json config file
  • secure [hostname].bin on OS level

Configuration:

  • After the inital run of w3rkstatt.py a local crypto key file is being generated in the ~.w3rkstatt/configs folder with [hostname].bin
  • After the inital run of w3rkstatt.py a local config file is being generated in the ~.w3rkstatt/configs folder with [hostname].json
  • Update the credentials and other settings in the [hostname].json file
  • Execute w3rkstatt.py to encrypt the passwords in [hostname].json
  • All password in cleartext will be removed
  • Update file level access for [hostname].bin to only authorized OS accounts. If the file [hostname].bin is being deleted, the encrypted passwords cannot be recovered
  • The account running the python scripts needs to have access to [hostname].json and [hostname].bin

Info: Cryptodome is beind utilized for safekeeping of the credentials

  • Folder: ~.w3rkstatt/configs
  • File: [hostname].json - custome config file
  • File: [hostname].bin - crypto key for security functions