https://github.com/major/securekickstarts
Secured kickstarts based on CIS Security Benchmarks
https://github.com/major/securekickstarts
Last synced: 9 months ago
JSON representation
Secured kickstarts based on CIS Security Benchmarks
- Host: GitHub
- URL: https://github.com/major/securekickstarts
- Owner: major
- Created: 2013-04-26T03:11:29.000Z (about 13 years ago)
- Default Branch: master
- Last Pushed: 2015-03-23T12:20:47.000Z (about 11 years ago)
- Last Synced: 2025-04-10T09:13:51.178Z (about 1 year ago)
- Language: Python
- Size: 170 KB
- Stars: 110
- Watchers: 26
- Forks: 35
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# CIS Security Benchmark Kickstarts
----
The kickstart files in this repository will give you a system which meets almost all of the scored standards from the [CIS Security Benchmarks](http://benchmarks.cisecurity.org/). The non-scored checks are excluded and I've also excluded adjustments that don't make sense for most environments (see comments in the kickstart for details).
### Disclaimers
* The kickstart files are Apache 2 Licensed
* I'm not affilated with the Center For Internet Security in any way
* These kickstarts aren't approved by the Center For Internet Security
* These kickstarts might not make your system any more secure than it was before you started
* These kickstarts may cause your server to leave the rack and chase cars
### Requirements & Caveats
The kickstarts are currently set up for **KVM-based environments.** If that's not accurate for your server environment, look for this string in the kickstart:
--driveorder=vda
Change `vda` to reflect whatever is accurate for your environment. For example, you may want to change this to `xvda` for Xen VM's or `sda` for physical servers with SATA drives.
I'd recommend starting with a **minimum disk size of 20GB** for these kickstarts. Adjust the `logvol` lines to smaller sizes if your disk happens to be smaller.
#### Enjoy!
*-- Major Hayden*