https://github.com/raochoa0626/linux-hardening-checklist
Bash script and checklist for hardening Ubuntu/Linux systems: users, SSH, firewall, logging, and auditing.
https://github.com/raochoa0626/linux-hardening-checklist
automation bash hardening linux security sysadmin
Last synced: about 2 months ago
JSON representation
Bash script and checklist for hardening Ubuntu/Linux systems: users, SSH, firewall, logging, and auditing.
- Host: GitHub
- URL: https://github.com/raochoa0626/linux-hardening-checklist
- Owner: raochoa0626
- Created: 2025-10-06T21:44:16.000Z (9 months ago)
- Default Branch: main
- Last Pushed: 2025-10-06T21:44:24.000Z (9 months ago)
- Last Synced: 2025-10-06T23:29:06.676Z (9 months ago)
- Topics: automation, bash, hardening, linux, security, sysadmin
- Language: Shell
- Size: 0 Bytes
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Linux Hardening Checklist
- Create non-root user; disable root SSH login
- SSH: key-based auth, change port if policy allows, fail2ban (optional)
- Keep packages updated: unattended-upgrades
- Configure firewall (ufw/firewalld)
- Filesystem permissions (home dirs, /var/log)
- Enable auditd; review journald retention
- Backups & recovery test
See `harden.sh` for a basic script (adjust before use).