elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-07-16 22:02:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

chore: remove CIS recommendation numbers from bin/hardening scripts

Browse Source
This commit is contained in:
Damien Cavagnini
2025-06-25 16:15:32 +02:00
parent aebb65889e
commit b6965e73ec
242 changed files with 242 additions and 243 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bin/hardening/acc_logindefs_sha512.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 99.5.4.5.1 Check that any password that will be created will use sha512crypt (or yescrypt for Debian 11+) # Check that any password that will be created will use sha512crypt (or yescrypt for Debian 11+)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/acc_pam_sha512.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.3.4 Ensure password hashing algorithm is SHA-512 (Scored) # Ensure password hashing algorithm is SHA-512 (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/acc_shadow_sha512.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 99.5.4.5.2 Check that passwords in /etc/shadow are sha512crypt (or yescrypt for Debian 11+) hashed and salted # Check that passwords in /etc/shadow are sha512crypt (or yescrypt for Debian 11+) hashed and salted
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/acc_sudoers_no_all.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 99.1.3 Check there are no carte-blanche authorization in sudoers file(s). # Check there are no carte-blanche authorization in sudoers file(s).
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/audit_backlog_limit.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 4.1.1.4 Ensure audit_backlog_limit is sufficient (Scored) # Ensure audit_backlog_limit is sufficient (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/audit_bootloader.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 4.1.1.3 Ensure auditing for processes that start prior to auditd is enabled (Scored) # Ensure auditing for processes that start prior to auditd is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/audit_log_storage.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 4.1.2.1 Ensure audit log storage size is configured (Scored) # Ensure audit log storage size is configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/bootloader_ownership.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.5.1 Ensure permissions on bootloader config are configured (Scored) # Ensure permissions on bootloader config are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/bootloader_password.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.5.2 Ensure bootloader password is set (Scored) # Ensure bootloader password is set (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/check_distribution.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 99.99 Ensure that the distribution version is debian and that the version is 9 or 10 # Ensure that the distribution version is debian and that the version is 9 or 10
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/check_duplicate_gid.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 6.2.17 Ensure no duplicate GIDs exist (Scored) # Ensure no duplicate GIDs exist (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/check_duplicate_groupname.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 6.2.19 Ensure no duplicate group names exist (Scored) # Ensure no duplicate group names exist (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/check_duplicate_uid.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 6.2.16 Ensure no duplicate UIDs exist (Scored) # Ensure no duplicate UIDs exist (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/check_duplicate_username.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 6.2.18 Ensure no duplicate user names exist (Scored) # Ensure no duplicate user names exist (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/check_user_dir_perm.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 6.2.8 Ensure users' home directories permissions are 750 or more restrictive (Scored # Ensure users' home directories permissions are 750 or more restrictive (Scored
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/check_user_dot_file_perm.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 6.2.10 Ensure users' dot files are not group or world writable (Scored) # Ensure users' dot files are not group or world writable (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/configure_chrony.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.1.3 Ensure chrony is configured (Scored) # Ensure chrony is configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/configure_logrotate.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 4.3 Ensure logrotate is configured (Not Scored) # Ensure logrotate is configured (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/configure_ntp.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.1.2 Ensure ntp is configured (Scored) # Ensure ntp is configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/configure_ssh_max_startups.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.22 Ensure SSH MaxStartups is configured (Scored) # Ensure SSH MaxStartups is configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/configure_syslog-ng.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 4.2.1.3 Configure /etc/syslog-ng/syslog-ng.conf (Not Scored) # Configure /etc/syslog-ng/syslog-ng.conf (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/configure_systemd-timesyncd.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.1.2 Ensure systemd-timesyncd is configured (Not Scored) # Ensure systemd-timesyncd is configured (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/cron_d_perm_ownership.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.7 Ensure permissions on /etc/cron.d are configured (Scored) # Ensure permissions on /etc/cron.d are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/cron_daily_perm_ownership.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.4 Ensure permissions on /etc/cron.daily are configured (Scored) # Ensure permissions on /etc/cron.daily are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/cron_hourly_perm_ownership.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.3 Ensure permissions on /etc/cron.hourly are configured (Scored) # Ensure permissions on /etc/cron.hourly are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/cron_monthly_perm_ownership.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.6 Ensure permissions on /etc/cron.monthly are configured (Scored) # Ensure permissions on /etc/cron.monthly are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/cron_users.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.8 Ensure at/cron is restricted to authorized users (Scored) # Ensure at/cron is restricted to authorized users (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/cron_weekly_perm_ownership.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.5 Ensure permissions on /etc/cron.weekly are configured (Scored) # Ensure permissions on /etc/cron.weekly are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/crontab_perm_ownership.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.2 Ensure permissions on /etc/crontab are configured (Scored) # Ensure permissions on /etc/crontab are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/default_root_group.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.4.3 Ensure default group for the root account is GID 0 (Scored) # Ensure default group for the root account is GID 0 (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/default_timeout.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.4.4 Ensure default usershell timeout is 900 seconds or less # Ensure default usershell timeout is 900 seconds or less
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/default_umask.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.4.4 Ensure default user umask is 027 or more restrictive (Scored) # Ensure default user umask is 027 or more restrictive (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_apport.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.6.3.1 Ensure apport is disabled (Scored) # Ensure apport is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_automounting.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.22 Disable Automounting (Scored) # Disable Automounting (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_avahi_server.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.3 Ensure Avahi Server is not enabled (Scored) # Ensure Avahi Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_bsd_inetd.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.1.2 Ensure bsd-inetd is not enabled (Scored) # Ensure bsd-inetd is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_cramfs.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.1.1 Ensure Mounting of cramfs filesystems is disabled (Scored) # Ensure Mounting of cramfs filesystems is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_dccp.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.4.1 Ensure DCCP is disabled (Not Scored) # Ensure DCCP is disabled (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_dhcp.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.5 Ensure DHCP Server is not enabled (Scored) # Ensure DHCP Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_dns_server.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.8 Ensure DNS Server is not enabled (Scored) # Ensure DNS Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_freevxfs.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.1.1 Ensure Mounting of freevxfs filesystems is disabled (Scored) # Ensure Mounting of freevxfs filesystems is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_ftp.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.9 Ensure FTP Server is not enabled (Scored) # Ensure FTP Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_hfs.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.1.3 Ensure mounting of hfs filesystems is disabled (Scored) # Ensure mounting of hfs filesystems is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_hfsplus.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.1.4 Ensure mounting of hfsplus filesystems is disabled (Scored) # Ensure mounting of hfsplus filesystems is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_http_proxy.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.13 Ensure HTTP Proxy Server is not enabled (Scored) # Ensure HTTP Proxy Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_http_server.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.10 Ensure HTTP Server is not enabled (Scored) # Ensure HTTP Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_icmp_redirect.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.3.2 Ensure ICMP redirects are not accepted (Scored) # Ensure ICMP redirects are not accepted (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_imap_pop.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.11 Ensure IMAP and POP server is not installed (Scored) # Ensure IMAP and POP server is not installed (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_ip_forwarding.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.2.2 Ensure IP forwarding is disabled (Scored) # Ensure IP forwarding is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_ipv6.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.1.1 Disable IPv6 (Not Scored) # Disable IPv6 (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_ipv6_router_advertisement.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.3.9 Ensure IPv6 router advertisements are not accepted (Scored) # Ensure IPv6 router advertisements are not accepted (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_jffs2.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.1.2 Esnure mounting of jffs2 filesystems is disabled (Scored) # Esnure mounting of jffs2 filesystems is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_ldap.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.6 Ensure LDAP server is not enabled (Scored) # Ensure LDAP server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_ldap_client.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.3.5 Ensure LDAP client is not installed (Scored) # Ensure LDAP client is not installed (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_nfs_rpc.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.7 Ensure NFS and RPC are not enabled (Scored) # Ensure NFS and RPC are not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_nis.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.17 Ensure NIS Server is not enabled (Scored) # Ensure NIS Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_prelink.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.6.3 Ensure prelink is disabled (Scored) # Ensure prelink is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_print_server.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.4 Ensure CUPS is not enabled (Scored) # Ensure CUPS is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_rds.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.4.3 Ensure SCTP is disabled (Not Scored) # Ensure SCTP is disabled (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_root_login.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.10 Ensure SSH root login is disabled (Scored) # Ensure SSH root login is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_rsh_client.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.3.2 Ensure rsh client is not installed (Scored) # Ensure rsh client is not installed (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_rsync.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.16 Ensure rsync service is not enabled (Scored) # Ensure rsync service is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_samba.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.12 Ensure Samba is not enabled (Scored) # Ensure Samba is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_sctp.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.4.2 Ensure SCTP is disabled (Not Scored) # Ensure SCTP is disabled (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_secure_icmp_redirect.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.3.3 Ensure secure ICMP redirects are not accepted (Scored) # Ensure secure ICMP redirects are not accepted (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_send_packet_redirects.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.2.1 Ensure packet redirect sending is disabled (Scored) # Ensure packet redirect sending is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_snmp_server.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.14 Ensure SNMP Server is not enabled (Scored) # Ensure SNMP Server is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_source_routed_packets.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.3.1 Ensure source routed packets are not accepted (Scored) # Ensure source routed packets are not accepted (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_squashfs.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.1.5 Ensure mounting of squashfs filesystems is disabled (Scored) # Ensure mounting of squashfs filesystems is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_ssh_allow_tcp_forwarding.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.21 Ensure SSH AllowTCPForwarding is disabled (Scored) # Ensure SSH AllowTCPForwarding is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_sshd_hostbasedauthentication.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.9 Ensure SSH HostbasedAuthentication is disabled (Scored) # Ensure SSH HostbasedAuthentication is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_sshd_permitemptypasswords.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.11 Ensure SSH PermitEmptyPasswords is disabled (Scored) # Ensure SSH PermitEmptyPasswords is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_sshd_setenv.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.12 Ensure SSH PermitUserEnvironment is disabled (Scored) # Ensure SSH PermitUserEnvironment is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_system_accounts.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.4.2 Ensure system accounts are non-login (Scored) # Ensure system accounts are non-login (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_talk_client.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.3.3 Ensure talk client is not installed (Scored) # Ensure talk client is not installed (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_telnet_client.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.3.4 Ensure telnet client is not installed (Scored) # Ensure telnet client is not installed (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_telnet_server.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 99.2.2 Ensure telnet server is not enabled (Scored) # Ensure telnet server is not enabled (Scored)
# #
# Note: this check is not anymore in CIS hardening but we decided to keep it anyway # Note: this check is not anymore in CIS hardening but we decided to keep it anyway

2
bin/hardening/disable_tipc.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.4.4 Ensure TIPC is disabled (Not Scored) # Ensure TIPC is disabled (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_udf.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.1.6 Ensure mounting of udf filesystems is disabled (Scored) # Ensure mounting of udf filesystems is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_usb_devices.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 99.1.1.23 Disable USB Devices # Disable USB Devices
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_usb_storage.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.1.23 Disable USB storage (Scored) # Disable USB storage (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_wireless.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.1.2 Ensure wireless interfaces are disabled (Not Scored) # Ensure wireless interfaces are disabled (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_x11_forwarding.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.6 Ensure SSH X11 forwarding is disabled (Scored) # Ensure SSH X11 forwarding is disabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_xinetd.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.1.1 Ensure xinetd is not enabled (Scored) # Ensure xinetd is not enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/disable_xwindow_system.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 2.2.2 Ensure the X Window system is not installed (Scored) # Ensure the X Window system is not installed (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_apparmor.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.7.2.2 Ensure AppArmor is enabled in the bootloader configuration (Scored) # Ensure AppArmor is enabled in the bootloader configuration (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_auditd.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 4.1.1.2 Ensure auditd service is enabled (Scored) # Ensure auditd service is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_auditd_kernel.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 99.4.0 Ensure CONFIG_AUDIT is enabled in your running kernel # Ensure CONFIG_AUDIT is enabled in your running kernel
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_bad_error_message_protection.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.3.6 Ensure bogus ICMP responses are ignored (Scored) # Ensure bogus ICMP responses are ignored (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_cron.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.1.1 Ensure cron daemon is enabled (Scored) # Ensure cron daemon is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_firewall.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.5.1.1 Ensure Firewall is active (Scored) # Ensure Firewall is active (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_lockout_failed_password.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.3.2 Ensure lockout for failed password attempts is configured (Scored) # Ensure lockout for failed password attempts is configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_nx_support.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.6.1 Ensure XD/NX support is enabled (Not Scored) # Ensure XD/NX support is enabled (Not Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_pwquality.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.3.1 Ensure password creation requirements are configured (Scored) # Ensure password creation requirements are configured (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_randomized_vm_placement.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 1.6.2 Ensure address space layout randomization (ASLR) is enabled (Scored) # Ensure address space layout randomization (ASLR) is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_source_route_validation.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.3.7 Ensure Reverse Path Filtering is enabled (Scored) # Ensure Reverse Path Filtering is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_ssh_pam.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.20 Ensure SSH PAM is enabled (Scored) # Ensure SSH PAM is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_sshd_ignorerhosts.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 5.2.8 Ensure SSH IgnoreRhosts is enabled (Scored) # Ensure SSH IgnoreRhosts is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_syslog-ng.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 4.2.1.2 Ensure syslog-ng service is enabled (Scored) # Ensure syslog-ng service is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

2
bin/hardening/enable_tcp_syn_cookies.sh
View File

@ -6,7 +6,7 @@
# #
# #
# 3.3.8 Ensure TCP SYN Cookies is enabled (Scored) # Ensure TCP SYN Cookies is enabled (Scored)
# #
set -e # One error, it's over set -e # One error, it's over

Some files were not shown because too many files have changed in this diff Show More