Skip to content

Commit

Permalink
update README
Browse files Browse the repository at this point in the history
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
  • Loading branch information
konstruktoid committed Apr 24, 2020
1 parent 5f73433 commit 5ac73a1
Showing 1 changed file with 19 additions and 3 deletions.
22 changes: 19 additions & 3 deletions README.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,7 @@ image::logo/horizontal.png[Ubuntu Hardening]

A quick way to make a Ubuntu server a bit more secure.

Tested on `18.04 Bionic Beaver`, `Ubuntu 19.10 Eoan Ermine` and
`Ubuntu 20.04 Focal Fossa (development branch)`.
Tested on `18.04 Bionic Beaver` and `Ubuntu 20.04 Focal Fossa`.

Systemd required.

Expand Down Expand Up @@ -396,6 +395,23 @@ versions. The script will generate a file named `TESTRESULTS.adoc`.
Running `bash ./runHostTests.sh`, located in the link:tests/[tests directory],
will generate a `TESTRESULTS-<HOSTNAME>.adoc` report.

=== OpenSCAP testing
To run a https://github.com/ComplianceAsCode/content[OpenSCAP] test on a
Ubuntu host, where `v0.1.49` should be replaced with the latest available
version:

[source,shell]
----
sudo apt-get -y install libopenscap8 unzip
wget https://github.com/ComplianceAsCode/content/releases/download/v0.1.49/scap-security-guide-0.1.49-oval-510.zip
unzip scap-security-guide-0.1.49-oval-510.zip
cd scap-security-guide-0.1.49-oval-5.10
oscap info --fetch-remote-resources ./ssg-ubuntu1804-ds.xml
sudo oscap xccdf eval --fetch-remote-resources \
--profile xccdf_org.ssgproject.content_profile_anssi_np_nt28_high \
--report ../bionic_stig-report.html ./ssg-ubuntu1804-ds.xml
----

== Structure
[source,shell]
----
Expand All @@ -414,7 +430,6 @@ will generate a `TESTRESULTS-<HOSTNAME>.adoc` report.
│   ├── initpath.sh
│   └── tmp.mount
├── createPartitions.sh
├── genIndex.sh
├── logo
│   ├── horizontal.png
│   ├── icon.png
Expand All @@ -430,6 +445,7 @@ will generate a `TESTRESULTS-<HOSTNAME>.adoc` report.
│   ├── logrotate.conf
│   ├── mozilla-firefox-user.js
│   ├── proc_check.sh
│   ├── suid.list
│   ├── sysctl.conf
│   └── systemd_scan.sh
├── renovate.json
Expand Down

0 comments on commit 5ac73a1

Please sign in to comment.