You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|**[Lynis Installer](auditing/Lynis%20Installer/lynis-installer.bash)**| Download (clone) Lynis, a security auditing tool for Unix-like systems. | Auditing | Git, Internet connection | No root required |
40
38
|**[Root Locker](hardening/Root%20Locker/root-locker.bash)**| Locks the root account to prevent direct logins. | Hardening | Root privileges | Preserves sudo access |
41
-
|**[SSHD Hardening](hardening/SSHD%20Hardening/harden-sshd.bash)**| Harden OpenSSH server (sshd) per Lynis recommendations. | Hardening | Root privileges | Creates backups; restarts sshd |
42
-
|**[UFW Cloudflare](hardening/UFW%20Cloudflare/ufw-cloudflare.bash)**| Configure UFW to only allow HTTP/HTTPS from Cloudflare IP ranges. | Hardening | Root privileges, UFW, Internet connection |**Beta status**|
39
+
|**[SSHD Hardening](hardening/SSHD%20Hardening/harden-sshd.bash)**| Harden OpenSSH server (sshd) per Lynis recommendations. | Hardening | Root privileges | Creates backups |
40
+
|**[UFW Cloudflare](hardening/UFW%20Cloudflare/ufw-cloudflare.bash)**| Configure UFW to only allow HTTP/HTTPS from Cloudflare IP ranges. | Hardening | Root privileges, UFW, Internet connection | Creates backups |
41
+
42
+
> [!NOTE]
43
+
> All scripts include version information in their headers. Check individual CHANGELOG.md files in each tool's directory for version history and updates.
44
+
43
45
## Getting Started
44
46
45
47
### Prerequisites
46
48
49
+
The following requirements extend to every tool in this repository:
50
+
47
51
-**Bash**: Version 4.0 or higher
48
52
-**Operating System**: Linux-based distribution
49
-
-**File Permissions**: Ability to make scripts executable (`chmod +x`)
50
53
51
54
> [!NOTE]
52
55
> Individual scripts may have additional requirements listed in the table above.
> If you're downloading individual scripts, you may need to make them executable with `chmod +x <script-name>`.
65
-
66
66
## Usage
67
67
68
68
### Quick Start
@@ -79,7 +79,10 @@ For users who want to get started immediately:
79
79
cd~/lynis && sudo ./lynis audit system
80
80
```
81
81
82
-
3.**Apply hardening**: Based on the audit results, run the appropriate hardening scripts.
82
+
3.**Apply hardening**: Based on the audit results, run the appropriate hardening scripts with root privileges.
83
+
84
+
> [!CAUTION]
85
+
> **Production Environment Warning**: Always test scripts in a non-production environment first. Some scripts modify critical system configurations and may affect system accessibility.
83
86
84
87
### Individual Script Usage
85
88
@@ -95,9 +98,6 @@ You can run any script individually using one of the following methods:
95
98
bash [script-name]
96
99
```
97
100
98
-
> [!IMPORTANT]
99
-
> Scripts that require root privileges will prompt you or exit with an error if not run with appropriate permissions.
100
-
101
101
## Post-Installation
102
102
103
103
After running the hardening scripts:
@@ -112,28 +112,16 @@ After running the hardening scripts:
112
112
113
113
## Tested On
114
114
115
-
All of the scripts should work on most, if not all Linux Distributions. With that said, below is a list of Linux Distributions that the scripts have been officially tested and are confirmed to work on.
115
+
All of the scripts should work on most, if not all, Linux distributions with Bash v4.0+ installed. With that said, below is a list of Linux distributions that the scripts have been officially tested and are confirmed to work on.
116
116
117
117
| Distributions | Distro Versions |
118
118
| ------------- | ---------------------- |
119
119
| Ubuntu | 24.04, 22.04, 20.04 |
120
120
| Debian | 11, 10, 9 |
121
121
122
-
> [!NOTE]
123
-
> Scripts should work on most Linux distributions with Bash 4.0+. The above list represents officially tested distributions.
124
-
125
-
## Troubleshooting
126
-
127
-
### Common Issues
128
-
129
-
-**Permission denied**: Ensure you're running scripts with appropriate permissions (sudo for hardening scripts).
130
-
-**Git not found**: Install git with your package manager (`apt install git`, `yum install git`, etc.).
131
-
-**SSH connection lost**: The SSHD hardening script creates a backup at `/etc/ssh/sshd_config.bak` - you can restore it if needed.
132
-
-**UFW conflicts**: If you have existing UFW rules, review them before running the Cloudflare script.
133
-
134
122
## Other Resources
135
123
136
-
While this repository has scripts that can help secure Linux, it's not nearly enough to secure the system as much as it needs to be. Below is a list of other resources that you can/should use to help make your system as secure as possible.
124
+
Below is a list of additional resources that you can/should use to help make your system as secure as possible.
0 commit comments