Implement functinality to patch system based on recommended actions about agent HOT 5 OPEN

We want to demo this for an investor, so let's take some shortcuts to get the alpha version of this working. Here are some shortcuts:

• Instead of making an API call back to the back-end to lookup what an ID means, let's use names (e.g. wott-agent patch openssh-disable-password-auth).
• Let's limit the scope to the ssh recommended actions.
• Let's make sure to run a ping at the end of the run.
• Let's make sure to take a backup of the file prior to the change.

Outstanding tasks for MVP after #263:

• Add comment on line before
• Backup config file to /opt/wott/backup
• Test and restart service using SIGHUP
• Add warning message for when disabling password auth Warning: Before you disable password authentication, make sure that you have generated and installed your SSH keys on this server. Failure to do so will result in that you will be locked out. I have have my SSH key(s) installed: [y/N]

from agent.

MVP is done Sprint 16. We've received great feedback on this. Now we need to revisit the original scope in Sprint 17.

from agent.

We need to resume work on this. As next steps, I want to do the following:

• Port all CVE instructions to the agent (WoTTsecurity/api#771).
  • AWS Linux
  • Ubuntu
• Hide 'Certificate expires...' when using patch.

Next sprint

• Display the actual diff as per the instructions in the initial ticket.
• Implement patch for 'Automatic security updates not enabled'
  • AWS Linux
  • Ubuntu

from agent.

13 complexity points

from agent.

20

from agent.