cookbook 'linux_server_hardening', '~> 1.0.0'
linux_server_hardening (1) Versions 1.0.0 Follow0
Automated Linux server hardening baseline.
cookbook 'linux_server_hardening', '~> 1.0.0', :supermarket
knife supermarket install linux_server_hardening
knife supermarket download linux_server_hardening
A Chef cookbook for applying a basic Linux server hardening baseline.
Features
- Disables direct SSH root login
- Limits SSH authentication attempts
- Disables X11 forwarding
- Configures SSH idle connection handling
- Installs basic security-related packages
- Sets a restrictive default umask
- Manages SSH hardening configuration through Chef
Requirements
- Chef Infra Client 17+
- Linux operating system
- Root or equivalent administrative privileges
Usage
Add the cookbook to your Chef policy or run list:
run_list(
'recipe[linux_server_hardening::default]'
)
Then converge the node:
chef-client
Security Considerations
Test the cookbook on a non-production server before applying it broadly.
Ensure an alternative administrative SSH account and authentication method are available before disabling direct root SSH login.
This cookbook does not automatically disable SSH password authentication.
Linux Server Management
For professional Linux server administration, monitoring, troubleshooting, and hardening:
https://iserversupport.com/linux-server-management/
License
MIT
Dependent cookbooks
This cookbook has no specified dependencies.
Contingent cookbooks
There are no cookbooks that are contingent upon this one.
linux_server_hardening CHANGELOG
This file is used to list changes made in each version of the linux_server_hardening cookbook.
0.1.0
Initial release.
- change 0
- change 1
Collaborator Number Metric
1.0.0 failed this metric
Failure: Cookbook has 0 collaborators. A cookbook must have at least 2 collaborators to pass this metric.
Contributing File Metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a CONTRIBUTING.md file
Cookstyle Metric
1.0.0 passed this metric
No Binaries Metric
1.0.0 passed this metric
Testing File Metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
1.0.0 failed this metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a CONTRIBUTING.md file
Cookstyle Metric
1.0.0 passed this metric
No Binaries Metric
1.0.0 passed this metric
Testing File Metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
1.0.0 passed this metric
1.0.0 passed this metric
Testing File Metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file
Version Tag Metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
1.0.0 failed this metric
1.0.0 failed this metric
Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number
