Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Dec 2, 2017

• Merge branch 'master' of https://github.com/virtadpt/ubuntu-hardening

  virtadpt

  committed
  ddd3d47

  Copy full SHA for ddd3d47

• Out of paranoia, disable PasswordAuthentication in sshd, forcing pubkey

  Show description for d3d2bcf
  virtadpt

  committed
  d3d2bcf

  Copy full SHA for d3d2bcf

Commits on Aug 26, 2017

• Merge pull request virtadpt#1 from shesek/patch-1

  Show description for ab0d9a0
  virtadpt

  authored
  ab0d9a0

  Copy full SHA for ab0d9a0

• Fixed typo

  shesek

  authored
  a860457

  Copy full SHA for a860457

Commits on Aug 19, 2016

• Added another command to enable mod_rewrite so that the Apache security.conf

  Show description for b4f1ae4
  virtadpt

  committed
  b4f1ae4

  Copy full SHA for b4f1ae4

• Added a command to enable Apache's mod_headers (even though it won't be

  Show description for f263ad8
  virtadpt

  committed
  f263ad8

  Copy full SHA for f263ad8

Commits on Aug 18, 2016

• Initial commit of an AIDE sub-config file that ignores all of the

  Show description for 74fdc45
  virtadpt

  committed
  74fdc45

  Copy full SHA for 74fdc45

Commits on Apr 29, 2016

• Added code to the setup script which enables and configures TLS support

  Show description for d2e0a54
  virtadpt

  committed
  d2e0a54

  Copy full SHA for d2e0a54

• Initial commit of a hardened /etc/nginx/sites-available/default vhost

  Show description for 90cda94
  virtadpt

  committed
  90cda94

  Copy full SHA for 90cda94

Commits on Apr 28, 2016

• Initial commit of a hardened /etc/nginx/nginx.conf config file.

  Show description for 0894466
  virtadpt

  committed
  0894466

  Copy full SHA for 0894466

• Initial commit of a hardened security.conf file for Apache v2.x.

  Show description for 7183772
  virtadpt

  committed
  7183772

  Copy full SHA for 7183772

• Initial commit of a hardened default HTTPS website for Apache v2.x.

  Show description for 79eb05b
  virtadpt

  committed
  79eb05b

  Copy full SHA for 79eb05b

• Initial commit of a hardened /etc/apache2/mods-available/ssl.conf file.

  Show description for 322cc19
  virtadpt

  committed
  322cc19

  Copy full SHA for 322cc19

• Initial commit of a hardened Apache v2.x config file.

  Show description for e168510
  virtadpt

  committed
  e168510

  Copy full SHA for e168510

• Initial commit of a configured /etc/default/aide file and a (fixed) logwatch

  Show description for aa560c6
  virtadpt

  committed
  aa560c6

  Copy full SHA for aa560c6

• Configured APT to automatically update the local package database and then

  Show description for bff78e4
  virtadpt

  committed
  bff78e4

  Copy full SHA for bff78e4

• Added a few more packages to the installation script.

  Show description for a41a0bd
  virtadpt

  committed
  a41a0bd

  Copy full SHA for a41a0bd

• Added an /etc/sudoers file which logs everything to /var/log/sudo-io.

  Show description for c6554fc
  virtadpt

  committed
  c6554fc

  Copy full SHA for c6554fc

Commits on Apr 27, 2016

• Initial commit of a limits.conf file that does not permit core dumps.

  Show description for 91bd7d6
  virtadpt

  committed
  91bd7d6

  Copy full SHA for 91bd7d6

• Initial commits of shell profiles with a umask of 077.

  Show description for b89fa63
  virtadpt

  committed
  b89fa63

  Copy full SHA for b89fa63

• Initial commit of a hardened password complexity config file.

  Show description for 2541927
  virtadpt

  committed
  2541927

  Copy full SHA for 2541927

• Initial commits of /etc/[at,cron].allow, which the CIS Benchmarks require.

  Show description for 1425d56
  virtadpt

  committed
  1425d56

  Copy full SHA for 1425d56

• Initial commit of a hardened /etc/sysctl.conf file.

  Show description for e2b2bde
  virtadpt

  committed
  e2b2bde

  Copy full SHA for e2b2bde

• Added configured /etc/hosts.[allow,deny] files.

  Show description for 30d302f
  virtadpt

  committed
  30d302f

  Copy full SHA for 30d302f

• Started enabling and disabling important services.

  Show description for 0a232ef
  virtadpt

  committed
  0a232ef

  Copy full SHA for 0a232ef

• Initial commit of the sysstat default file which will turn it on at

  Show description for ba53942
  virtadpt

  committed
  ba53942

  Copy full SHA for ba53942

• Enabled display of /etc/motd on login.

  Show description for 94fb8d5
  virtadpt

  committed
  94fb8d5

  Copy full SHA for 94fb8d5

• Added the /etc/skel/.ssh directory so that all users created on the system

  Show description for 8409cd3
  virtadpt

  committed
  8409cd3

  Copy full SHA for 8409cd3

• Initial commit of an sshd_config file for Ubuntu v16.04-lts.

  Show description for 6f48b10
  virtadpt

  committed
  6f48b10

  Copy full SHA for 6f48b10

Commits on Apr 5, 2016

• Added the transport protection headers for HTTP (they were in place for

  Show description for 5c8bf36
  virtadpt

  committed
  5c8bf36

  Copy full SHA for 5c8bf36

Commits on Mar 29, 2016

• Added a command to patch the system automagically. No reason not to.

  Show description for 46f9447
  virtadpt

  committed
  46f9447

  Copy full SHA for 46f9447

Commits on Mar 25, 2016

• Removed the Postfix config files because the hardening protocols need to be

  Show description for 9527c60
  virtadpt

  committed
  9527c60

  Copy full SHA for 9527c60

Commits on Feb 22, 2016

• Changed the default e-mail address to send the output of logwatch to from

  Show description for 7d5c1b3
  virtadpt

  committed
  7d5c1b3

  Copy full SHA for 7d5c1b3

Commits on Sep 14, 2015

• AIDE databases really only need one message digest algorithm. Chaining a

  Show description for 8378da4
  virtadpt

  committed
  8378da4

  Copy full SHA for 8378da4

Commits on Feb 13, 2015

• Just explicitly set PasswordAuthentication in sshd to 'no' because a couple

  Show description for ebd56c3
  virtadpt

  committed
  ebd56c3

  Copy full SHA for ebd56c3

Pagination

Previous

Next