Bob Mottram
|
b0ed59de5f
|
Remove messages when running STIG
|
2016-11-30 20:21:58 +00:00 |
|
Bob Mottram
|
0e47f66928
|
Test STIG separately and with no output if all tests pass
|
2016-11-30 20:20:13 +00:00 |
|
Bob Mottram
|
42d5bc9321
|
Move tmp to a ramdisk
|
2016-11-30 20:10:51 +00:00 |
|
Bob Mottram
|
8f11ab2102
|
Don't check bluetooth
In most cases it doesn't exist and if it does it gets turned off in the config
|
2016-11-30 19:36:01 +00:00 |
|
Bob Mottram
|
fa9c3b6f22
|
Prefer bettercrypto cyphers
|
2016-11-30 19:16:27 +00:00 |
|
Bob Mottram
|
28e8155750
|
Modules aren't installed anyway
|
2016-11-30 18:27:07 +00:00 |
|
Bob Mottram
|
b872f429c6
|
Invert logic
|
2016-11-30 18:08:58 +00:00 |
|
Bob Mottram
|
496f3cd4f2
|
Not needed, handled by unattended upgrades
|
2016-11-30 18:02:50 +00:00 |
|
Bob Mottram
|
3f0d9b7b82
|
Disable null passwords
|
2016-11-30 17:54:45 +00:00 |
|
Bob Mottram
|
05a6efe365
|
This only applies in a typical server scenario where there are lots of users on one machine
|
2016-11-30 17:48:31 +00:00 |
|
Bob Mottram
|
22a7378852
|
Exceptions
|
2016-11-30 17:44:43 +00:00 |
|
Bob Mottram
|
e6d4f1af0c
|
Logging is already minimised by default
|
2016-11-30 17:37:53 +00:00 |
|
Bob Mottram
|
b88a3e867b
|
Disable tipc
|
2016-11-30 17:24:05 +00:00 |
|
Bob Mottram
|
6b4dba4771
|
Disable rds
|
2016-11-30 17:21:22 +00:00 |
|
Bob Mottram
|
21a3edf51a
|
Disable sctp
|
2016-11-30 17:18:22 +00:00 |
|
Bob Mottram
|
c9f6fbd54f
|
Disable dccp
|
2016-11-30 17:15:43 +00:00 |
|
Bob Mottram
|
82a57bc41c
|
Don't accept redirects
|
2016-11-30 17:04:56 +00:00 |
|
Bob Mottram
|
b9ad7e57a3
|
ipv6 can be used
|
2016-11-30 16:26:05 +00:00 |
|
Bob Mottram
|
b399c50c26
|
More ip rules
|
2016-11-30 16:18:40 +00:00 |
|
Bob Mottram
|
d4c07b2cc8
|
Improve check for ctrl-alt-del
|
2016-11-30 16:04:05 +00:00 |
|
Bob Mottram
|
b106d14890
|
Single quotes
|
2016-11-30 15:46:04 +00:00 |
|
Bob Mottram
|
23f67f2426
|
Checking for ctrl-alt-del link
|
2016-11-30 15:43:31 +00:00 |
|
Bob Mottram
|
2fd24df9a1
|
Zero on success
|
2016-11-30 14:43:36 +00:00 |
|
Bob Mottram
|
73316797e3
|
Change rule to exclude nonexistent directory
|
2016-11-30 14:38:28 +00:00 |
|
Bob Mottram
|
8dfaa5d981
|
irc user directory
|
2016-11-30 14:25:27 +00:00 |
|
Bob Mottram
|
01c8ac8b60
|
Passwords are usually random so this doesn't apply
|
2016-11-30 14:00:44 +00:00 |
|
Bob Mottram
|
f45f281dd4
|
Set lychee permissions
|
2016-11-30 13:55:41 +00:00 |
|
Bob Mottram
|
6090d6c84c
|
Permission on tox node keys
|
2016-11-30 13:51:03 +00:00 |
|
Bob Mottram
|
5c79c584fc
|
Set sticky bits
|
2016-11-30 13:40:17 +00:00 |
|
Bob Mottram
|
3f58fc17d2
|
exim/procmail command permissions
|
2016-11-30 13:12:15 +00:00 |
|
Bob Mottram
|
b97ec3892b
|
Dummy nologin command
To fix STIG error
|
2016-11-30 10:30:56 +00:00 |
|
Bob Mottram
|
7e9f249e11
|
radicale user directory
|
2016-11-30 10:23:58 +00:00 |
|
Bob Mottram
|
466dec4d89
|
Change function name
|
2016-11-30 09:41:56 +00:00 |
|
Bob Mottram
|
c4de2e86d2
|
Add and remove groups when for users
|
2016-11-30 09:40:10 +00:00 |
|
Bob Mottram
|
e51e1a9ce2
|
Help option
|
2016-11-30 09:36:12 +00:00 |
|
Bob Mottram
|
396b202982
|
Disable core dumps
|
2016-11-29 23:19:31 +00:00 |
|
Bob Mottram
|
a76a4d22f9
|
Disk encryption is optional
|
2016-11-29 23:13:36 +00:00 |
|
Bob Mottram
|
a25037f226
|
Firewall drops forwards
|
2016-11-29 23:10:55 +00:00 |
|
Bob Mottram
|
4eced972fd
|
Install screen to enable console locking
|
2016-11-29 22:39:29 +00:00 |
|
Bob Mottram
|
20701521bb
|
Simultaneous user logins
|
2016-11-29 22:19:46 +00:00 |
|
Bob Mottram
|
83ef278c13
|
Done via control panel
|
2016-11-29 22:13:03 +00:00 |
|
Bob Mottram
|
4a4fd7899f
|
root mail
|
2016-11-29 22:12:02 +00:00 |
|
Bob Mottram
|
21d74c022d
|
Zero on success
|
2016-11-29 22:01:33 +00:00 |
|
Bob Mottram
|
4b33bdf8fc
|
Permissions in makefile
|
2016-11-29 21:53:20 +00:00 |
|
Bob Mottram
|
0cdefe53c2
|
Permissions in makefile
|
2016-11-29 21:52:12 +00:00 |
|
Bob Mottram
|
f6fd2111e7
|
Ensure permissions on freedombone commands
|
2016-11-29 21:49:40 +00:00 |
|
Bob Mottram
|
9749cb43ce
|
sudo permissions
|
2016-11-29 21:17:52 +00:00 |
|
Bob Mottram
|
11899c9904
|
Set command file permissions
|
2016-11-29 20:49:11 +00:00 |
|
Bob Mottram
|
8e9933725d
|
Remove logins via serial console
|
2016-11-29 20:34:29 +00:00 |
|
Bob Mottram
|
7a66ad8571
|
Use tripwire
|
2016-11-29 20:17:00 +00:00 |