Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

PMM-Dump Tool - SecOps Request

Description

Hi SE.

In continue to Edu & Sveta conversation,

1. We would like you to consider to add by design an Encryption and a random Password protection to the Dump file. 

2. Once the dump will be done, the password will be presented for one time only, the user should keep the password and can share it with the relevant people/users.

3. There should be an option to dump the file as insecure option based on the user decision, if so, the Dump will be exported without Encryption / Password. 

Environment

None

Attachments

1

Activity

Show:

Sveta Smirnova last month

, could you please clarify the request a little bit:

  1. If we decide to use GPG, should the user be able to encrypt the dump not only with an AES256 passphrase but also with key-based encryption?

  1. Where should we output the generated password: to stderr or to a separate file?

  1. Should encryption be enabled by default or via an option?

Amir Marcus December 11, 2023 at 9:16 AM

Hi Seveta,

Good morning,

I created a mini POC, for the GPG. Seems to work fine, 

I created a txt file and encrypted it with GPG, and it created the GPG extension file.

 

Thanks,

Amir

Amir Marcus December 5, 2023 at 2:47 PM
Edited

Hi, we did some research about few encryptions methods.

We chose PGP Encryption - You can find more details here - https://learn.microsoft.com/en-us/system-center/orchestrator/standard-activities/pgp-encrypt-file?view=sc-orch-2022

PGP was mostly used to encrypt Emails, but it is also supports files/folders.

Command example: https://www.redhat.com/sysadmin/encryption-decryption-gpg 

 

Also as a second option you can check Ccrypt that will also works.

https://www.geeksforgeeks.org/encrypt-decrypt-files-in-linux-using-ccrypt/

 

Please check them out and let us know what do you think, and if you have any questions please let us know.

Thanks.

 

Details

Assignee

Reporter

Reviewer

Components

Fix versions

Affects versions

Priority

Smart Checklist

Created December 1, 2023 at 9:16 AM
Updated 8 minutes ago