Owner

dev-sec

12 indexed repositories · View on GitHub

ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

Jinja · 5476 stars
linux-baseline
DevSec Linux Baseline - InSpec Profile

Ruby · 875 stars
chef-os-hardening
This chef cookbook provides numerous security-related configurations, providing all-round base protection.

Ruby · 453 stars
hardening
DevSec Examples

Ruby · 355 stars
chef-ssh-hardening
This chef cookbook provides secure ssh-client and ssh-server configurations.

Ruby · 168 stars
chef-windows-hardening
This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.

Ruby · 107 stars
chef-postgres-hardening
This chef cookbook provides security configuration for PostgreSQL.

Ruby · 28 stars
docker-ansible
Docker containers that include ansible latest stable 2.x version.

Dockerfile · 27 stars
chef-mysql-hardening
This chef cookbook provides security configuration for mysql.

Ruby · 27 stars
chef-apache-hardening

Ruby · 25 stars
dev-sec.github.io
project website

SCSS · 22 stars
.github

2 stars

Beginner friendly Everything

Open All

Dependency Dashboard Open

Difficulty 1/5 Under an hour Newbie friendliness 20/100

dev-sec/chef-postgres-hardening#34 · Opened Mar 31, 2023
Dependency Dashboard Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

dev-sec/chef-apache-hardening#37 · Opened Mar 31, 2023
Dependency Dashboard Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

dev-sec/hardening#19 · Opened Mar 31, 2023
Dependency Dashboard Open

Difficulty 3/5 1-2 days Newbie friendliness 20/100

dev-sec/.github#14 · Opened Mar 31, 2023
Dependency Dashboard Open

invalid

Difficulty 5/5 Over a week Newbie friendliness 15/100

dev-sec/ansible-collection-hardening#655 · Opened Mar 31, 2023
improve deletion of unsecured MySQL users to include the new auth mechanisms Open

enhancement mysql_hardening

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#643 · Opened Mar 1, 2023
devsec.hardening.mysql_hardening - Operation not supported on ubuntu 22.04 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#633 · 5 comments · Opened Feb 6, 2023
After os_hardening user@1000.service fails on Debian Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#613 · 1 comment · Opened Dec 28, 2022
os-hardening: Pam config does not allow password changes and auto home dir creation on AD joined RHEL 8 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#575 · 1 comment · Opened Sep 7, 2022
sysctl-34 - fs.protected_hardlinks and fs.protected_symlinks can be nil Open

Difficulty 1/5 Under an hour Newbie friendliness 48/100

dev-sec/linux-baseline#173 · 6 comments · Opened Jul 12, 2022
task for `ctrl-alt-del.target` not idempotent Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 25/100

dev-sec/ansible-collection-hardening#548 · Opened Jul 11, 2022
deprecate "init" config file template for RHEL7 and newer? Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#545 · 1 comment · Opened Jun 29, 2022
os_auth_pw_remember has no effect on Ubuntu/Debian Open

enhancement hacktoberfest-accepted help wanted

Difficulty 4/5 3-5 days Newbie friendliness 28/100

dev-sec/ansible-collection-hardening#543 · 1 comment · Opened Jun 21, 2022
OS harden will not enable SELinux if SELinux is disabled Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#537 · 1 comment · Opened Apr 27, 2022
Deprecated auditd.conf Parameters Warning Open

Difficulty 3/5 1-2 days Newbie friendliness 30/100

dev-sec/ansible-collection-hardening#533 · 1 comment · 2 reactions · Opened Mar 12, 2022
Allow setting a different port for the client and the server Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

dev-sec/chef-ssh-hardening#240 · Opened Feb 14, 2022
Does it support Windows 2019? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/chef-windows-hardening#55 · Opened Dec 9, 2021
Add file system checks for other shadow and passwd/group files Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

dev-sec/linux-baseline#161 · 1 comment · Opened Oct 25, 2021
New release Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

dev-sec/chef-windows-hardening#54 · 1 comment · 1 reaction · Opened Oct 4, 2021
PAM should not be configured via files in `/usr/share/pam-configs` Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#483 · 4 comments · Opened Sep 21, 2021
Add support for Debian 11 "bullseye" Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/chef-ssh-hardening#236 · 1 comment · Opened Sep 7, 2021
devsec.hardenting.os_hardening breaks pmlogger_daily on Oracle Linux 8 (maybe RHEL 8 too) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#460 · 6 comments · Opened Jul 9, 2021
Ensure access to the su command is restricted Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#435 · 3 comments · Opened Mar 24, 2021
Cannot re-enable MOTD once disabled Open

bug help wanted

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#391 · 2 comments · 3 reactions · Opened Feb 7, 2021
policycoreutils-python-utils not a valid package for rhel/fedora. v2.9.0 Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

dev-sec/chef-ssh-hardening#233 · Opened Feb 4, 2021
Allow configuration of SyslogFacility in sshd_config Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/chef-ssh-hardening#232 · Opened Jan 30, 2021
Configure sudo Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#379 · 1 reaction · Opened Jan 20, 2021
net.ipv4.tcp_timestamps Open

Difficulty 2/5 1-3 hours Newbie friendliness 42/100

dev-sec/ansible-collection-hardening#360 · 5 comments · 4 reactions · Opened Dec 26, 2020
Unify print_motd? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

dev-sec/ansible-collection-hardening#358 · 5 comments · Opened Dec 20, 2020
ssh_server_password_login doesn't work due to AuthenticationMethods Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#337 · 9 comments · Opened Dec 11, 2020
Support for validation of cpu vulnerabilities (#114) needs further consideration... Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

dev-sec/linux-baseline#140 · 7 comments · 5 reactions · Opened Dec 8, 2020
Chef Infra Client 16+ NoMethodError: undefined method `password_policy' Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

dev-sec/chef-windows-hardening#52 · 5 comments · 5 reactions · Opened Oct 30, 2020
disable rpcbind Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/linux-baseline#137 · 3 comments · Opened Oct 23, 2020
pam-auth-update --package prompts interactive debconf Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

dev-sec/chef-os-hardening#261 · Opened Apr 8, 2020
policycoreutils-python-utils not found on Amazon Linux 1 Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/chef-ssh-hardening#228 · 2 comments · 1 reaction · Opened Feb 11, 2020
idempotency issues: "check package signature in repo files" and "remove_suid_from_blacklists" Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/chef-os-hardening#257 · 1 comment · 1 reaction · Opened Oct 4, 2019
Cookbook supports only English versions of Windows Open

hacktoberfest

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/chef-windows-hardening#48 · Opened Jun 28, 2019
clean recipes after the CIS implementation is done Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/chef-windows-hardening#47 · Opened May 14, 2019
implement the full CIS Benchmark for Win2012r2 and 2016 Open

help wanted

Difficulty 5/5 Over a week Newbie friendliness 25/100

dev-sec/chef-windows-hardening#46 · 1 comment · Opened May 14, 2019
Allow configuration of multiple SFTP groups Open

help wanted

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/chef-ssh-hardening#216 · 1 comment · Opened May 8, 2019
Wrong OpenSuse /etc/shadow membership Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

dev-sec/chef-os-hardening#250 · Opened Apr 10, 2019
Failing centos 7 dokken tests in the CI Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

dev-sec/chef-os-hardening#248 · Opened Apr 10, 2019
check the sshd config before sshd restart Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/chef-ssh-hardening#215 · 7 comments · Opened Mar 20, 2019
"remove selinux-policy when Pam is used" Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

dev-sec/ansible-collection-hardening#331 · Opened Mar 10, 2019
enable_winrm_access does not seem to work Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/chef-windows-hardening#41 · Opened Feb 28, 2019
Normative specification as a benchmark in an audit - CIS or DISA Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

dev-sec/linux-baseline#110 · 4 comments · 1 reaction · Opened Feb 13, 2019
Powershell logging doesn't designate output Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/chef-windows-hardening#40 · Opened Jan 29, 2019
autogenerate the overview table from the `baselines.yml` file Open

enhancement help wanted

dev-sec/dev-sec.github.io#30 · 2 assignees · Opened Dec 19, 2018
data structure of baseline.yml Open

dev-sec/dev-sec.github.io#29 · 2 assignees · Opened Dec 19, 2018
trigger rebuilds of the site on updates to `master` of tracked baselines Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

dev-sec/dev-sec.github.io#24 · 10 comments · Opened Dec 11, 2018

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

dev-sec

Showing the newest 100

Get new issues in your inbox