Repository navigation
Linux Hardening Toolkit LH-1.3 — separate assessment, hardening and lab guides
Choose the guide for your task:
- Assess an existing server: use the assessment guide/PDF. Collect with the reviewed scripts on the Linux target, redact and transfer the report, then run the prompt on a separate workstation.
- Apply selected approved fixes: use
hardening-runbook.mdin the ZIP/repository. Inspection and change commands are separated. - Reproduce our tests: use
lab-guide.mdonly for a disposable VM. Itsapt-get installsteps and modifying fixtures are optional maintainer work, never assessment prerequisites.
The primary PDF is now 19 pages and contains no installation/remediation command examples. The README and prompt explicitly keep missing tools/evidence visible instead of instructing setup or repairs. The full ZIP includes all three guides, the prompt, collection/validation tools, templates and dated VM evidence.
Control catalogue LH-1.2, all 28 IDs, operational scripts and worked results (3 scoped PASS, 25 MANUAL) are unchanged. Existing local fixture/artifact/checksum checks and rendered PDF review passed; root-only capture assertions remain a workstation skip with prior VM receipts retained. This documentation revision does not claim another VM run or a CloudHero website deployment.
Use SHA256SUMS to compare the three release assets. Checksums provide integrity checks, not independent publisher attestation.