Commit Graph

704 Commits

Author SHA1 Message Date
Samson-W f175cf4639 Update auditd rules of 8.1.26: replaced pam_tally2 with faillock in debian 11. 2021-08-16 00:57:51 +08:00
Samson.W 0d8593986f
Merge pull request #33 from Samson-W/master
Update Readme.md: support debian11
2021-08-15 17:30:51 +08:00
Samson-W 6b89d4cb24 Update Readme.md: support debian11 2021-08-15 17:29:46 +08:00
Samson.W 0652ec431f
Merge pull request #32 from Samson-W/master
Update the number of the check item .
2021-08-15 17:23:06 +08:00
Samson-W 356124dfdb Update the number of the check item . 2021-08-15 17:12:07 +08:00
Samson.W baccad9c3b
Merge pull request #31 from Samson-W/master
Modify 4.8: Re-implement the detection items of disabled USB devices.
2021-07-28 00:45:26 +08:00
Samson-W cfb0a3c22f Modify 4.8: Re-implement the detection items of disabled USB devices. 2021-07-28 00:42:01 +08:00
Samson.W 7e2bf1c5b5
Merge pull request #30 from Samson-W/master
Fix some bugs and apply rsyslog server
2021-07-18 21:55:40 +08:00
Samson-W b3857a06da Modify the log prefix of iptables for the log classification collection of rsyslog. 2021-07-18 21:52:39 +08:00
Samson-W 9b7beb1588 Add some auditd rules for log server. 2021-07-17 22:47:39 +08:00
Samson-W e4743a7588 Fix a bug space_left of auditd.conf 2021-07-17 22:46:18 +08:00
Samson.W 8995b0c9db
Merge pull request #29 from Samson-W/master
Fix a bug and update how_to_deploy_audisp_remote_for_audit_log.mkd
2021-07-16 01:02:21 +08:00
Samson-W 8ad11ac333 Fix a bug: If /var/log is a separate partition, check whether /var is a separate partition will be passed. 2021-07-16 00:58:37 +08:00
Samson-W d262a18d70 Update how_to_deploy_audisp_remote_for_audit_log.mkd 2021-07-09 01:51:32 +08:00
Samson.W c944bbb498
Merge pull request #28 from Samson-W/master
Modify for apply rsyslog.
2021-07-08 01:18:27 +08:00
Samson-W 0349040bb4 Modify for apply rsyslog. 2021-07-08 01:16:15 +08:00
Samson.W bbd85fa9b6
Merge pull request #27 from Samson-W/master
Update README.md
2021-07-07 00:51:54 +08:00
Samson-W 54c2ac38a1 Update README.md 2021-07-07 00:50:08 +08:00
Samson-W 00531deb50 Update README.md 2021-07-06 23:58:29 +08:00
Samson.W ffc3809e47
Merge pull request #26 from Samson-W/master
Fix a bug of 1.2 and add depend pkg info to 1.3
2021-07-04 04:32:54 +08:00
Samson-W 7d0be2a21e Add dependance pkg info for 1.3 2021-07-04 04:28:24 +08:00
Samson-W 7419bdc333 Fix a bug of 1.2 2021-07-04 03:31:46 +08:00
Samson.W 0124084e0b
Merge pull request #25 from Samson-W/master
Delete unimplemented items: 8.2.3 8.3.3 8.6 9.4
2021-06-24 01:43:58 +08:00
Samson.W 23e2fd0e4f
Merge branch 'hardenedlinux:master' into master 2021-06-24 01:41:54 +08:00
Samson-W 0bc369003c Delete unimplemented items: 8.2.3 8.3.3 8.6 9.4 2021-06-23 01:43:21 +08:00
Samson.W 8a02a3638c
Merge pull request #24 from Samson-W/master
Modify auditd related check items to apply -dont-auditd-by-uid and check_audit_path.
2021-06-22 21:51:36 +08:00
Samson-W e45da09761 Modify some checklists apply check_audit_path 2021-06-22 21:20:30 +08:00
Samson-W fad9b17d38 Rename 8.1.31 to 8.1.34, rename 8.1.34 to 8.1.31 2021-06-21 22:59:24 +08:00
Samson-W b84fb622b5 Modify 8.1.34 for apply --dont-auditd-by-uid, and add aide-common pkg for 8.4.1 2021-06-21 22:23:49 +08:00
Samson-W d825beb240 Fix a bug of check_audit_path function. 2021-06-21 02:17:08 +08:00
Samson-W f6b1ea8286 Modify function check_audit_path to check whether the pathname of the rule in the from of 'auditctl -w' is valid. 2021-06-21 01:18:16 +08:00
Samson-W 20a266a774 Modify related auditd checklist for --dont-auditd-by-uid 2021-06-21 00:07:36 +08:00
Samson-W 6209e876e1 Fix a bug: when --dont-auditd-by-uid is not set a valid value, it's continues running 2021-06-20 23:53:35 +08:00
Samson.W 2330cea519
Merge pull request #23 from Samson-W/master
Add 8.1.32 8.1.33 8.1.34 for auditd rules, and rename 8.1.32 to 8.1.35
2021-06-20 21:46:34 +08:00
Samson-W a9dc7057ae Add 8.1.32 8.1.33 8.1.34 for auditd rules, and rename 8.1.32 to 8.1.35. Add global variable DONT_AUDITD_BY_UID for enable/disable use UID in the auditd rules. 2021-06-15 21:38:36 +08:00
Samson-W 88983fe3a9 Call backup_file when modify some conf file in 1.2 and 1.3 2021-06-09 23:08:25 +08:00
Samson-W d6fca32f10 Fix a bug: when the Debian version is the Codename, an error will occur 2021-02-22 12:08:40 +08:00
Samson-W 64bececd2d Fix some bugs for Debian11(bullseye). 2021-02-22 03:53:02 +08:00
Samson-W 5e8b093cd5 Add exception method for --allow-service to skip audit and apply. 2020-11-06 14:54:58 +08:00
Samson-W fad60e595b Modify 9.3.11 9.3.21 9.3.24 to adapt the check of default parameter values through the runtime state of sshd configuration. 2020-11-06 01:42:22 +08:00
Samson-W 385bd6e8ba Apply check_sshd_conf_for_one_value_runtime for 9.3.12 2020-11-05 14:20:55 +08:00
Samson-W 7eb3f188f5 Optimize the error message for sshd configuration relate. 2020-11-05 02:47:53 +08:00
Samson-W 822d6ef2c8 Fix some bugs related to sshd configuration. 2020-11-05 02:23:42 +08:00
Samson-W d9d2609e84 Apply check_sshd_conf_for_one_value_runtime for sshd config relate 2020-11-04 18:35:17 +08:00
Samson-W cbf85fe443 Add check_sshd_conf_for_one_value_runtime method, and modify 9.3.2 2020-11-03 19:50:50 +08:00
Samson-W 34de8084d7 Modify apply method of 14.1 2020-11-02 21:56:30 +08:00
Samson-W 6bf8a58bef Add 14.1 for defense NAT slipstreaming and add method to utils 2020-11-02 21:26:48 +08:00
Samson-W c24e12541e Fix issues #20 2020-09-22 12:52:12 +08:00
Samson-W f2e49b69cc Update README.md README-CN.md 2020-09-19 10:52:58 +08:00
Samson-W b550c2ddc2 Update some format of how_to_fix_SELinux_access_denied.mkd 2020-09-15 14:59:08 +08:00