elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-09-03 05:08:22 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
latest
debian-cis/bin/hardening
History
damcav35 9bd170438c Damcava35/deb12 scripts 10 (#294) 
* fix ssh related tests

As letting sshd active will mess with others scripts later

* feat: add debian12 scripts

- nftables_loopback_is_configured.sh 	-> 4.2.6
- nftables_established_connections.sh 	-> 4.2.7
- iptables_flushed_with_nftables.sh 	-> 4.2.3
- ufw_loopback_is_configured.sh 	-> 4.1.4
- ufw_outbound_connection.sh 		-> 4.1.5
- ufw_default_deny.sh 			-> 4.1.7
- ufw_rules_them_all.sh 		-> 4.1.6

---------

Co-authored-by: damien cavagnini <damien.cavagnini@corp.ovh.com>
2025-09-02 13:57:12 +02:00
..
.gitignore
Initial Commit Basic folders
2016-04-01 07:50:08 +02:00
acc_logindefs_sha512.sh
chore: drop debian 10 and below support (#264)
2025-07-04 14:18:56 +02:00
acc_pam_sha512.sh
chore: drop debian 10 and below support (#264)
2025-07-04 14:18:56 +02:00
acc_shadow_sha512.sh
chore: drop debian 10 and below support (#264)
2025-07-04 14:18:56 +02:00
acc_sudoers_no_all.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
aide_daily_check.sh
feat: add debian12 scripts (#291)
2025-08-18 16:11:37 +02:00
aide_is_installed.sh
feat: add debian12 scripts (#290)
2025-08-14 14:41:04 +02:00
apt_gpg_is_configured.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
at_is_restricted.sh
feat: add debian12 scripts (#290)
2025-08-14 14:41:04 +02:00
audit_backlog_limit.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
audit_bootloader.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
audit_log_storage.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
auditd_logs_full_halt.sh
feat: add debian12 scripts (#292)
2025-08-19 12:01:34 +02:00
bluetooth_is_disabled.sh
feat: add debian12 scripts (#290)
2025-08-14 14:41:04 +02:00
bootloader_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
bootloader_password.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
check_distribution.sh
chore: drop debian 10 and below support (#264)
2025-07-04 14:18:56 +02:00
check_duplicate_gid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
check_duplicate_groupname.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
check_duplicate_uid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
check_duplicate_username.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
check_user_dir_perm.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
check_user_dot_file_perm.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
chrony_is_enabled_and_running.sh
Damcava35/deb12 scripts 3 (#279)
2025-08-06 16:50:52 +02:00
chrony_with_chrony_user.sh
Damcava35/deb12 scripts 4 (#287)
2025-08-12 14:42:37 +02:00
configure_chrony.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
configure_logrotate.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
configure_ntp.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
configure_ssh_max_startups.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
configure_syslog-ng.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
configure_systemd-timesyncd.sh
Damcava35/update lib (#277)
2025-08-06 11:13:49 +02:00
cron_d_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
cron_daily_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
cron_hourly_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
cron_monthly_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
cron_users.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
cron_weekly_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
crontab_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
default_root_group.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
default_timeout.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
default_umask.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
dev_shm_separate_partition.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
disable_apport.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_automounting.sh
Damcava35/update lib (#277)
2025-08-06 11:13:49 +02:00
disable_avahi_server.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_bsd_inetd.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_cramfs.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_dccp.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_dhcp.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_dns_server.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_freevxfs.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_ftp.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_hfs.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_hfsplus.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_http_proxy.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_http_server.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_icmp_redirect.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_imap_pop.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_ip_forwarding.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_ipv6_router_advertisement.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_ipv6.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_jffs2.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_ldap_client.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_ldap.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_nfs_rpc.sh
Damcava35/deb12 scripts 4 (#287)
2025-08-12 14:42:37 +02:00
disable_nis.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_prelink.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_print_server.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_rds.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_root_login.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_rsh_client.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_rsync.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_samba.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_sctp.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_secure_icmp_redirect.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_send_packet_redirects.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_snmp_server.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_source_routed_packets.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_squashfs.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_ssh_allow_tcp_forwarding.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_sshd_hostbasedauthentication.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_sshd_permitemptypasswords.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_sshd_setenv.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_system_accounts.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_talk_client.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_telnet_client.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_telnet_server.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_tipc.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_udf.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_usb_devices.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_usb_storage.sh
refactor: is_kernel_option_enabled (#267)
2025-07-11 11:20:59 +02:00
disable_wireless.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_x11_forwarding.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_xinetd.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
disable_xwindow_system.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
dnsmasq_is_disabled.sh
chore: add new scripts for debian 12 (#278)
2025-08-06 15:03:51 +02:00
enable_apparmor.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_auditd_kernel.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_auditd.sh
Damcava35/update lib (#277)
2025-08-06 11:13:49 +02:00
enable_bad_error_message_protection.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_cron.sh
Damcava35/update lib (#277)
2025-08-06 11:13:49 +02:00
enable_firewall.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_libpam_pwquality.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
enable_lockout_failed_password.sh
chore: drop debian 10 and below support (#264)
2025-07-04 14:18:56 +02:00
enable_nx_support.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_pwquality.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_randomized_vm_placement.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_source_route_validation.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_ssh_pam.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_sshd_ignorerhosts.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enable_syslog-ng.sh
Damcava35/update lib (#277)
2025-08-06 11:13:49 +02:00
enable_tcp_syn_cookies.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enforce_or_complain_apparmor.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
enforcing_apparmor.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_group_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_group-_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_gshadow_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_gshadow-_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_issue_net_perms.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_issue_perms.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_passwd_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_passwd-_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_shadow_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
etc_shadow-_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_0_uid_non_root_account.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_passwd_group_inconsistencies.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_sgid_files.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_suid_files.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_ungrouped_files.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_unowned_files.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_user_forward_files.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_user_netrc_files.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_user_rhosts_files.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
find_world_writable_file.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
freeze_auditd_conf.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ftp_client_not_installed.sh
Damcava35/deb12 scripts 4 (#287)
2025-08-12 14:42:37 +02:00
gdm_is_removed.sh
chore: add new scripts for debian 12 (#278)
2025-08-06 15:03:51 +02:00
graphical_warning_banners.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
halt_when_audit_log_full.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
home_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
home_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
home_partition.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
hosts_allow_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
hosts_allow.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
hosts_deny_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
hosts_deny.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ignore_broadcast_requests.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
install_apparmor.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
install_auditd.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
install_iptables.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
install_libpam_pwquality.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
install_nftables.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
install_sudo.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
install_syslog-ng.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
install_tcp_wrapper.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
install_tripwire.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
install_updates.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
iptables_flushed_with_nftables.sh
Damcava35/deb12 scripts 10 (#294)
2025-09-02 13:57:12 +02:00
iptables_persistent_is_not_installed.sh
Damcava35/deb12 scripts 5 (#289)
2025-08-14 12:25:25 +02:00
ipv6_is_enabled.sh
Damcava35/deb12 scripts 4 (#287)
2025-08-12 14:42:37 +02:00
journald_compress.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
journald_is_enabled.sh
feat: add debian12 scripts (#291)
2025-08-18 16:11:37 +02:00
journald_logs.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
journald_write_persistent.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
keep_all_audit_logs.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
libpam_modules_is_installed.sh
feat: add debian12 scripts (#292)
2025-08-19 12:01:34 +02:00
libpam_runtime_is_version.sh
Damcava35/deb12 scripts 5 (#289)
2025-08-14 12:25:25 +02:00
limit_ssh_max_sessions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
lock_inactive_user_account.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
log_martian_packets.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
logfile_sudo.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
logrotate_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
logs_permissions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
motd_perms.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
mta_localhost.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
net_fw_default_policy_drop.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
network_services_listening.sh
Damcava35/deb12 scripts 3 (#279)
2025-08-06 16:50:52 +02:00
nftables_default_deny_policy.sh
feat: add debian12 scripts (#293)
2025-08-22 13:38:23 +02:00
nftables_established_connections.sh
Damcava35/deb12 scripts 10 (#294)
2025-09-02 13:57:12 +02:00
nftables_has_base_chains.sh
feat: add debian12 scripts (#293)
2025-08-22 13:38:23 +02:00
nftables_has_table.sh
feat: add debian12 scripts (#293)
2025-08-22 13:38:23 +02:00
nftables_is_enabled.sh
feat: add debian12 scripts (#293)
2025-08-22 13:38:23 +02:00
nftables_loopback_is_configured.sh
Damcava35/deb12 scripts 10 (#294)
2025-09-02 13:57:12 +02:00
nftables_not_installed_with_iptables.sh
Damcava35/deb12 scripts 5 (#289)
2025-08-14 12:25:25 +02:00
nftables_rules_permanent.sh
feat: add debian12 scripts (#293)
2025-08-22 13:38:23 +02:00
package_manager_is_configured.sh
chore: add new scripts for debian 12 (#278)
2025-08-06 15:03:51 +02:00
password_complexity.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
password_consecutive_characters.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
password_history_remember.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
password_last_change_past.sh
Fix typo 'paswword' to 'password' in password_last_change_past.sh (#280)
2025-08-07 16:10:08 +02:00
password_max_sequential_characters.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
password_min_length.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
ptrace_scope_is_restricted.sh
chore: add new scripts for debian 12 (#278)
2025-08-06 15:03:51 +02:00
pty_sudo.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_dac_edit.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_date_time_edit.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_failed_access_file.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_file_deletions.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_kernel_modules.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_login_logout.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_mac_edit.sh
fix: update record_mac_edit.sh to use apparmor instead of selinux (#262)
2025-07-03 09:27:09 +02:00
record_network_edit.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_privileged_commands.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_session_init.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_successful_mount.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_sudo_usage.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_sudoers_edit.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
record_user_group_edit.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remote_syslog-ng_acl.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
removable_device_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
removable_device_noexec.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
removable_device_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remove_empty_password_field.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remove_legacy_group_entries.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remove_legacy_passwd_entries.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remove_legacy_shadow_entries.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remove_os_info_issue_net.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remove_os_info_issue.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
remove_os_info_motd.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
restrict_core_dumps.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
restrict_fat.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
restrict_su.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
root_password.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
rpcbind_is_disabled.sh
Damcava35/deb12 scripts 4 (#287)
2025-08-12 14:42:37 +02:00
run_shm_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
run_shm_noexec.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
run_shm_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sanitize_root_path.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
secure_tty.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
set_password_exp_days.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
set_password_exp_warning_days.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
set_password_min_days_change.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
set_perm_on_user_netrc.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
shadow_group_empty.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_auth_pubk_only.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_banner.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_cry_kex.sh
chore: drop debian 10 and below support (#264)
2025-07-04 14:18:56 +02:00
ssh_cry_mac.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_cry_rekey.sh
chore: drop debian 10 and below support (#264)
2025-07-04 14:18:56 +02:00
ssh_disable_features.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_host_private_keys_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_host_public_keys_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_keys_from.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_strict_modes.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_sys_accept_env.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ssh_sys_no_legacy.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_ciphers.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_conf_perm_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_idle_timeout.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_limit_access.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_login_grace_time.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_loglevel.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_maxauthtries.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sshd_protocol.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sticky_bit_world_writable_folder.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
sudo_auth_timeout.sh
feat: add debian12 scripts (#292)
2025-08-19 12:01:34 +02:00
sudo_no_nopasswd.sh
feat: add debian12 scripts (#290)
2025-08-14 14:41:04 +02:00
syslog_ng_logfiles_perm.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
syslog-ng_remote_host.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
systemd_journal_remote_is_disabled.sh
feat: add debian12 scripts (#291)
2025-08-18 16:11:37 +02:00
systemd_journal_remote_is_installed.sh
feat: add debian12 scripts (#291)
2025-08-18 16:11:37 +02:00
systemd_journal_upload_is_enabled.sh
feat: add debian12 scripts (#291)
2025-08-18 16:11:37 +02:00
systemd_journal_upload_remote_auth.sh
feat: add debian12 scripts (#292)
2025-08-19 12:01:34 +02:00
systemd_timesyncd_is_enabled_and_running.sh
Damcava35/deb12 scripts 4 (#287)
2025-08-12 14:42:37 +02:00
tftp_is_disabled.sh
Damcava35/deb12 scripts 3 (#279)
2025-08-06 16:50:52 +02:00
tmp_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
tmp_noexec.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
tmp_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
tmp_partition.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
tripwire_cron.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
ufw_default_deny.sh
Damcava35/deb12 scripts 10 (#294)
2025-09-02 13:57:12 +02:00
ufw_is_enabled.sh
Damcava35/deb12 scripts 5 (#289)
2025-08-14 12:25:25 +02:00
ufw_is_installed.sh
Damcava35/deb12 scripts 5 (#289)
2025-08-14 12:25:25 +02:00
ufw_loopback_is_configured.sh
Damcava35/deb12 scripts 10 (#294)
2025-09-02 13:57:12 +02:00
ufw_not_installed_with_iptables.sh
feat: add debian12 scripts (#292)
2025-08-19 12:01:34 +02:00
ufw_not_installed_with_nftables.sh
feat: add debian12 scripts (#292)
2025-08-19 12:01:34 +02:00
ufw_outbound_connection.sh
Damcava35/deb12 scripts 10 (#294)
2025-09-02 13:57:12 +02:00
ufw_rules_them_all.sh
Damcava35/deb12 scripts 10 (#294)
2025-09-02 13:57:12 +02:00
uninstall_nis.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
use_time_sync.sh
Damcava35/deb12 scripts 3 (#279)
2025-08-06 16:50:52 +02:00
users_homedir_exist.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
users_homedir_is_configured.sh
Damcava35/new scripts (#265)
2025-08-06 10:49:21 +02:00
users_homedir_ownership.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_audit_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_audit_noexec.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_audit_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_audit_partition.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_noexec.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_log_partition.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_partition.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_tmp_nodev.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_tmp_noexec.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_tmp_nosuid.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
var_tmp_partition.sh
Damcava35/set version (#257)
2025-07-01 08:41:55 +02:00
wireless_interfaces_disabled.sh
feat: add debian12 scripts (#290)
2025-08-14 14:41:04 +02:00