Executing compliance verification or remediation scripts
AssigneeRed Hat, Inc.
InventorsJan Pazdziora, {hacek over (S)}imon Luka{hacek over (s)}ik
Life of this patent
Estimating the term…
Abstract
Systems and methods for executing compliance verification or remediation scripts. An example method may comprise: identifying, by a computer system, a compliance script to be executed; determining a value of a cryptographic hash function of at least part of the identified compliance script; identifying, based on the value of the cryptographic hash function, an installation path of a corresponding digitally signed compliance script pre-installed on the computer system, the digitally signed compliance script associated with a security context; and executing, within the security context, the digitally signed compliance script.
Claims20
A method, comprising:
- identifying, by a hardware processor, a first compliance script;
- determining a value of a cryptographic hash function of at least part of the first compliance script;
- determining, using the value of the cryptographic hash function, an installation path of a second compliance script;
- identifying a security context associated with the second compliance script at installation time;
- and
- executing, by the hardware processor, the second compliance script within the security context to determine whether a parameter of a computer system is within an allowed range.
A computer system, comprising:
- a memory;
- and
- a hardware processor, operatively coupled to the memory, to:
- identify a first compliance script;
- determine a value of a cryptographic hash function of at least part of the first compliance script;
- determine, using the value of the cryptographic hash function, an installation path of a second compliance script;
- identify a security context associated with the second compliance script at installation time;
- and
- execute the second compliance script within the security context to determine whether a parameter of the computer system is within an allowed range.
A non-transitory computer-readable storage medium comprising executable instructions to cause a hardware processor to:
- identify, by the hardware processor, a first compliance script;
- determine a value of a cryptographic hash function of at least part of the first compliance script;
- determine, using the value of the cryptographic hash function, an installation path of a second compliance script;
- identify a security context associated with the second compliance script at installation time;
- and
- execute, by the hardware processor, the second compliance script within the security context to determine whether a parameter of a computer system is within an allowed range.
Dependencies are inferred from the claim text.