tyler.durden/harbian-audit
1
0
Fork 0
mirror of https://github.com/hardenedlinux/harbian-audit.git synced 2025-07-31 01:24:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #27 from Samson-W/master

Browse Source 
Update README.md
This commit is contained in:
Samson.W 2021-07-07 00:51:54 +08:00 committed by GitHub
commit bbd85fa9b6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md Normal file → Executable file
View File

@ -140,6 +140,14 @@ Use the command to harden your OS:
# bash bin/hardening.sh --apply # bash bin/hardening.sh --apply
``` ```
### rsyslog config
If rsyslog is used, and you want to print the harbian-audit log to a separate log file, the configuration is as follows:
```
user.info /var/log/harbian-audit.log
user.* -/var/log/user.log
```
The log will be output to the file /var/log/harbian-audit.log.
## After remediation (Very important) ## After remediation (Very important)
When exec --apply and set-hardening-level are set to 5 (the highest level), you need to do the following: When exec --apply and set-hardening-level are set to 5 (the highest level), you need to do the following:
@ -193,7 +201,7 @@ $ sed -i 's/^define int_if = ens33/define int_if = eth0/g' etc.nftables.conf
Some check items check a variety of situations and are interdependent, they must be applied (fix) multiple times, and the OS must be a reboot after each applies (fix). Some check items check a variety of situations and are interdependent, they must be applied (fix) multiple times, and the OS must be a reboot after each applies (fix).
### Items that must be applied after the first application(reboot after is better) ### Items that must be applied after the first application(reboot after is better)
8.1.32 Because this item is set, the audit rules will not be added. 8.1.35 Because this item is set, the audit rules will not be added.
### Items that must be applied after all application is ok ### Items that must be applied after all application is ok
8.4.1 8.4.1
@ -201,9 +209,6 @@ Some check items check a variety of situations and are interdependent, they must
These are all related to the aide. It is best to fix all the items after they have been fixed to fix the integrity of the database in the system. These are all related to the aide. It is best to fix all the items after they have been fixed to fix the integrity of the database in the system.
### Items that need to be fix twice ### Items that need to be fix twice
8.1.1.2
8.1.1.3
8.1.12
4.5 4.5
## Hacking ## Hacking
@ -280,7 +285,6 @@ AMI Name: harbian-audit complianced for Debian GNU/Linux 9
[How to creating and making a QEMU image of harbian-audit complianced Debian GNU/Linux 9](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/complianced_image/QEMU/how_to_creating_and_making_a_QEMU_img.mkd) [How to creating and making a QEMU image of harbian-audit complianced Debian GNU/Linux 9](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/complianced_image/QEMU/how_to_creating_and_making_a_QEMU_img.mkd)
[How to use QEMU image of harbian-audit complicanced Debian GNU/Linux 9](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/complianced_image/QEMU/how_to_use_QEMU_image_of_harbian_audit_complianced_Debian_9.mkd) [How to use QEMU image of harbian-audit complicanced Debian GNU/Linux 9](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/complianced_image/QEMU/how_to_use_QEMU_image_of_harbian_audit_complianced_Debian_9.mkd)
## harbian-audit License ## harbian-audit License
GPL 3.0 GPL 3.0