add --audit-all-enable-passed, add info in README and help

This commit is contained in:
Stéphane Lesimple
2016-04-19 20:16:47 +02:00
committed by thibault.dewailly
parent 8d84f38c97
commit 1d7865dd68
2 changed files with 45 additions and 7 deletions

7
README
View File

@ -16,6 +16,7 @@
# Main script :
# bin/hardening.sh : Will execute hardening according to configuration
# Options are :
# --apply : Will apply hardening when scripts have status enabled (RW), and audit points where status is audit (RO)
# --audit : Will audit hardening when scripts have status enabled or audit (RO)
# --audit-all : Apply audit (RO) on all scripts
# --apply : Will apply hardening when scripts have status enabled (RW), and audit points where status is audit (RO)
# --audit : Will audit hardening when scripts have status enabled or audit (RO)
# --audit-all : Apply audit (RO) on all scripts
# --audit-all-enable-passed : Apply audit (RO) on all scripts, and *modify* configuration files to enable scripts that passed. In other words, this is an easy way to enable scripts for which you're already compliant. However, please always review each activated script afterwards, this option should only be regarded as a way to kickstart a configuration from scratch faster than otherwise. Don't run this if you have already customized the scripts enable/disable configurations, obviously.