I've released a FreeBSD Hardening Script.
https://github.com/wravoc/harden-freebsd
This script will duplicate almost all the hardening settings run by /usr/libexec/bsdinstall/hardening and much more. Any directive can be set and re-set with a customizable settings.ini for administering, tuning your system, and locking down jails. I carefully selected a broad, cohesive group of hardening settings that together should provide a balanced risk/capability approach.
If there are better default settings or ones that you know cause a conflict with a particular piece of software please do share. I appreciate any feedback on what I should have done better given this limited scope of this Python learning project for me.
Thanks!
elias / Elias Christopher Griffin
npub15e…7vcvu
2023-06-19 20:54:53
Author Public Key
npub15et2fl2qhphnld4u7n7j8tad93aql8ercswecj6sx0qekkvqj7gs97vcvuPublished at
2023-06-19 20:54:53Event JSON
{
"id": "863fabeb6ea40c67c5401a6001feeffac872bf002c6621240f36693e827ff953",
"pubkey": "a656a4fd40b86f3fb6bcf4fd23afad2c7a0f9f23c41d9c4b5033c19b59809791",
"created_at": 1687208093,
"kind": 1,
"tags": [],
"content": "I've released a FreeBSD Hardening Script.\n\nhttps://github.com/wravoc/harden-freebsd\n\nThis script will duplicate almost all the hardening settings run by /usr/libexec/bsdinstall/hardening and much more. Any directive can be set and re-set with a customizable settings.ini for administering, tuning your system, and locking down jails. I carefully selected a broad, cohesive group of hardening settings that together should provide a balanced risk/capability approach.\n\nIf there are better default settings or ones that you know cause a conflict with a particular piece of software please do share. I appreciate any feedback on what I should have done better given this limited scope of this Python learning project for me.\n\nThanks!",
"sig": "5dee3fc50079279e51127c2441f240a48f02c5343b55713778e432d5f6f328bc99e820a9937738dbe655129be2ab5f03581f302d7aee68205e8748bd1bd58099"
}