Audiobuzz 33de300af8 docs/TODO: add #16 — enable a locked-down firewalld (defense-in-depth + STIG passes) ...

Captures the decision to re-enable a CONFIGURED firewalld (currently removed),
the required .pyc/-T0 root-cause fix (compileall --unchecked-hash), the 4 STIG
waivers it converts, and the load-bearing NVMe/TCP-survives-firewalld bench gate.

2026-07-03 01:31:03 +00:00

..

design-v2-errata.md

tpm-enrol: move signing key off the EK slot 0x81010001 → 0x81000100

2026-07-02 12:19:59 +00:00

diskless-fleet-design-v2.pdf

Initial commit

2026-06-12 01:46:29 +00:00

fleet-management-design.md

tpm-enrol: move signing key off the EK slot 0x81010001 → 0x81000100

2026-07-02 12:19:59 +00:00

secure-boot-keys.md

Update SSP

2026-06-25 23:46:42 +00:00

ssp-annex-a-ism-residual-risk.md

tpm-enrol: move signing key off the EK slot 0x81010001 → 0x81000100

2026-07-02 12:19:59 +00:00

ssp.md

tpm-enrol: move signing key off the EK slot 0x81010001 → 0x81000100

2026-07-02 12:19:59 +00:00

stig-deviations.md

stig: ship SELinux allow module for chrony DHCP-NTP dispatcher (stop chronyd AVC)

2026-07-03 01:16:26 +00:00

TODO.md

docs/TODO: add #16 — enable a locked-down firewalld (defense-in-depth + STIG passes)

2026-07-03 01:31:03 +00:00

tpm-enrolment-design.md

tpm-enrol: move signing key off the EK slot 0x81010001 → 0x81000100

2026-07-02 12:19:59 +00:00