Skip to content

Linux Hardening Toolkit LH-1.2

Choose a tag to compare

View all tags
@andrei821 andrei821 released this 04 Nov 14:28
lh-1.2
04499e9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Linux hardening toolkit LH-1.2 covers SSH, patch management, kernel lifecycle, firewall exposure, audit logging, configuration drift and production verification.

Included: a 27-page guide, a reusable 28-control assessment prompt, policy and change templates, private evidence capture, drift/report validators and dated Ubuntu 24.04 LTS ARM64 VM evidence.

Download linux-hardening-toolkit.zip for the complete package, or the PDF and prompt separately. Release SHA256SUMS verifies these assets; the ZIP includes its own file manifest. Run python3 scripts/validate-toolkit.py after extraction.

The assessed mechanisms include fresh SSH, role-specific sudo, kernel fallback, IPv4/IPv6 filtering, authenticated audit/syslog forwarding, all 300 queued-message receipts, drift detection and a synthetic rollback gate. These are bounded lab results. Organization-specific policy, production paths, human response and real workload acceptance still require evidence. Modifying lab fixtures are for disposable VMs only.

This release publishes the toolkit; it does not deploy the accompanying website article. See PUBLICATION.md for the original PDF and evidence provenance.

Assets 6
Loading