• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号

nozaq/amazon-linux-cis: Bootstrap script for Amazon Linux to comply CIS Amazon L ...

原作者: [db:作者] 来自: 网络 收藏 邀请

开源软件名称(OpenSource Name):

nozaq/amazon-linux-cis

开源软件地址(OpenSource Url):

https://github.com/nozaq/amazon-linux-cis

开源编程语言(OpenSource Language):

Python 100.0%

开源软件介绍(OpenSource Introduction):

This repositry is no longer maintained in favor of CIS hardened AMIs.

amazon-linux-cis

CircleCI Codacy Badge

Bootstrap script for Amazon Linux to comply with CIS Amazon Linux Benchmark v2.0.0.

Usage

$ git clone https://github.com/nozaq/amazon-linux-cis.git .
$ python ./amazon-linux-cis

Available Arguments

Argument (default value) What it does
--time (169.254.169.123) Specify the upstream time server
--chrony boolean (true) Use chrony for time synchronization
--no-backup Automatic config backup is disabled
--clients comma seperate list Specify a comma separated list of hostnames and host IP addresses
-v --verbose Enable verbose logging of utility
--disable-tcp-wrappers Disable installation of TCP Wrappers package
--disable-pam Disable the hardening of the PAM module
--disable-iptables Disable the installation of IPtables
--disable-mount-options Disable replacing the default /etc/fstab mounting config file

Amazon Linux 2 Support

Although the differences between Amazon Linux and Amazon Linux 2 are extensive (listed here), the majority of the changes to reach CIS compliance for Amazon Linux 2 are minor. Here's the minimum required command line needed to install the hardening on Amazon Linux 2 instances.

python ./amazon-linux-cis --disable-mount-options

Tested Environments

  • Amazon Linux 2017.09
  • Amazon Linux AMI 2018.03.0 (HVM)
  • Amazon Linux 2 - 2017.12



鲜花

握手

雷人

路过

鸡蛋
该文章已有0人参与评论

请发表评论

全部评论

专题导读
上一篇:
joojfork/Linuxyunwei: linux运维发布时间:2022-08-15
下一篇:
wklken/linux-notes: Some quick intro notebook of linux for Chinese Programmers发布时间:2022-08-15
热门推荐
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服(服务时间 9:00~18:00)

在线QQ客服
地址:深圳市南山区西丽大学城创智工业园
电邮:jeky_zhao#qq.com
移动电话:139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap