# Linux Security Audit Report

- Run dir: `/home/wangyin/linux-security-audit/reports/ascend210-20260610-010437`
- Generated: 2026-06-10T05:56:34.408932+00:00
- Host: `ascend210` (aarch64)

## Module summary

| Module | Status | Summary |
|---|---|---|
| sensitive-info-scan | warn | 11407 unique findings (7955 actionable, 3452 likely-FP). critical=60 high=69 medium=136 low=7690 info=0 |

## sensitive-info-scan

**critical**:60 **high**:69 **medium**:136 **low**:7690 **likely_fp**:3452 **total_unique**:11407

Top findings (20 of 11407):

- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/client-key-verify-san.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/client-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/crl-client-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/crl-client-revoked-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/crl-server-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/expired-ca-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/expired-client-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/expired-server-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/server-key-sha512.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/rsa_private_key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/server-key-verify-fail.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/server-key-verify-san.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/server-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/server-key-verify-pass.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/mysql-test/std_data/server8k-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/pkgs/mysql-5.7.24-h3140d82_2/mysql-test/std_data/client-key-verify-san.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/pkgs/mysql-5.7.24-h3140d82_2/mysql-test/std_data/client-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/pkgs/mysql-5.7.24-h3140d82_2/mysql-test/std_data/crl-client-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/pkgs/mysql-5.7.24-h3140d82_2/mysql-test/std_data/crl-client-revoked-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/home/jenkins/anaconda3/pkgs/mysql-5.7.24-h3140d82_2/mysql-test/std_data/crl-server-key.pem:1` score=12.0 entropy=3.66 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$

Notes:
- Severity is heuristic; review high/critical first.
- `is_likely_fp` items are kept for audit but should be skimmed, not actioned blindly.