B-5 · Medium
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
Untagged security units (fail2ban, AppArmor, USBGuard, a VPN) are Routine everywhere
| Breaks | Status | Mitigation | Closes in |
|---|---|---|---|
| Correct (classification) | Closed (02ba283) | Security by default for the named units and option trees; an undeclared or untagged system unit is External (fail closed); the named list is checked by checks.module-eval | A |