The Wayback Machine - https://web.archive.org/web/20200515230820/https://github.com/topics/security-hardening
Skip to content
#

security-hardening

Here are 216 public repositories matching this topic...

d4t4king
d4t4king commented May 1, 2020

Describe the bug
Online docs for NETW-3200 are not yet implemented.

Version

  • Distribution: Ubuntu 18.04
  • Lynis version: 3.0.0

Expected behavior
A (minimal) description of the problem should exist and ideally a general direction on how to fix the issue.

Output

A new discovery!

Oops, looks like this control is not listed yet in the database.

Want to help 
jackTaw88
jackTaw88 commented Feb 26, 2019

As you know it is hard to surf on web with user.js. I always have problem with many sites, but it i realyly takes time to find which config is not compatibale with the visited site. I think we can create a list of buggy sites so anyone can contribute it.

I can start with mines:


  • site
  • bug
  • comments
  • how to fix

  • linkedin.com
  • does not go home page after login
  • this is
sergiospa
sergiospa commented Mar 10, 2020

Description

When we have an automatic email reports configuration and there are no alerts to be reported that day (e.g the rule or group of rules that we have configured in reports have not triggered during the day), the report will not be sent.

This is not good behavior because it can lead the user to think that the automatic reports are not working.

Let's also say that I have to sen

mczarnek
mczarnek commented Feb 6, 2020

I love the idea behind this project!!!

I'm seeing that you don't automatically support say downloading stdio.h and stdio.c and transpiling them at the same time? How hard would that be? Seems like it'd be a huge win to automatically support standard libraries.


While I'm at it, I just posted to gstreamer-rs github encouraging them to try this out, I'd recommend he

eliotsykes
eliotsykes commented Jan 4, 2018

This may surprise developers used to other templating engines used in Rails, but, at time of writing, Liquid does not behave like ERB/HAML templates in Rails where interpolated values are escaped by default.

Liquid does not escape interpolated values and does not have an option (at time of writing) to configure this to be the default. The developer needs to remember each and every time to es

kclinden
kclinden commented Apr 11, 2019

Description of problem:

I have never written SCAP content before, and am looking at how to get started. I would like to write SCAP content to test compliance on Photon OS against DISA SRGs. I have been all over the wiki pages, but I am still not sure how to get started. The main page makes it look super easy for writing OVAL and XCCDF files using YAML, but I am not sure where to build those

kotodharma
kotodharma commented Sep 26, 2018

As the engineer who wrote this, I'm sure it all seems obvious to you :) but something that would be VERY helpful to add your website and your github README file would be two bullet lists: "What USBGuard Does", "What USBGuard Doesn't Do". Having this explained clearly would be very helpful even to those of us who are tech-savvy :) Thanks.

hakabo
hakabo commented Mar 16, 2018

I've been tasked with creating a CIS Level 1 standard RHEL image in Azure. I've taken a market place RHEL 7.3 image and applied this playbook with packer/ansible using tags level1.

However, when I go and try and create a VM from the image, it fails. If I skip cis_section1, I can create a VM from the image. I'm a linux newbie, apologies, but any obvious rules in section 1 that could be causing

ahomescu
ahomescu commented Feb 17, 2017

MSVC on Windows prepends padding instructions to functions for alignment (it currently uses the CC opcode for this and a 16-byte alignment for all functions by default). We currently preserve those instructions as "gap functions", but they should be safe to discard. We could add a pass that scans all gap functions and trims them by removing all CC (and even 90 as well) opcode.

Improve this page

Add a description, image, and links to the security-hardening topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the security-hardening topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.