Jsitech / JShielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark
GNU General Public License v3.0
758 stars 241 forks source link
centos7 cis-benchmark hardening hardening-steps iptables lamp-deployer lamp-stack lemp-deployer linux linux-server modsecurity security-hardening system-hardening ubuntu-server ubuntu1604 ubuntu1804

JShielder

JShielder Automated Hardening Script for Linux Servers

JSHielder is an Open Source Bash Script developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application or services. This tool automates the process of installing all the necessary packages to host a web application and Hardening a Linux server with little interaction from the user. Newly added script follows CIS Benchmark Guidance to establish a Secure configuration posture for Linux systems.

This tool is a Bash Script that hardens the Linux Server security automatically and the steps followed are:

NEW!!

CIS Benchmark JShielder Script Added

To Run the tool

./jshielder.sh

As the Root user

Issues

Having Problems, please open a New Issue for JShielder on Github.

Distro Availability

ChangeLog

v2.4 Added LEMP Deployment with ModSecurity and the OWASP ModSecurity Core Rule Set (CRS3)

v2.3 More Hardening steps Following some CIS Benchmark items for LAMP Deployer

v2.2.1 Removed suhosing installation on Ubuntu 16.04, Fixed MySQL Configuration, GRUB Bootloader Setup function, Server IP now obtain via ip route to not rely on interface naming

v2.2 Added new Hardening option following CIS Benchmark Guidance

v2.1 Hardened SSH Configuration, Tweaked Kernel Security Config, Fixed iptables rules not loading on Boot. Added auditd, sysstat, arpwatch install.

v2.0 More Deployment Options, Selection Menu, PHP Suhosin installation, Cleaner Code,

v1.0 - New Code

Developed by Jason Soto

https://www.jasonsoto.com

https://github.com/jsitech

Twitter = @JsiTech