Thursday, June 16, 2016 Automated Hardening Framework

Automated configuration management tools like Ansible, Chef and Puppet are changing the way that organizations provision and manage their IT infrastructure. These tools allow engineers to programmatically define how systems are set up, and automatically install and configure software packages. System provisioning and configuration becomes testable, auditable, efficient, scalable and consistent, from tens to hundreds or thousands of hosts.

These tools also change the way that system hardening is done. Instead of following a checklist or a guidebook like one of the CIS Benchmarks, and manually applying or scripting changes, you can automatically enforce hardening policies or audit system configurations against recognized best practices, using pre-defined hardening rules programmed into code.

An excellent resource for automated hardening is a set of open source templates originally developed at Deutsche Telekom, under the project name "". The authors have recently had to rename this hardening framework to

It includes Chef recipes and Puppet manifests for hardening base Linux, as well as for SSH, MySQL and PostgreSQL, Apache and Nginx. Ansible support at this time is limited to playbooks for base Linux and SSH. works on Ubuntu, Debian, RHEL, CenOS and Oracle Linux distros.

For container security, the project team have just added an InSpec profile for Chef Compliance against the CIS Docker 1.11.0 benchmark. is comprehensive and at the same time accessible. And it’s open, actively maintained, and free. You can review the rules, adopt them wholesale, or cherry pick or customize them if needed. It’s definitely worth your time to check it out on GitHub:


mytrainingsoline said...

Nice observation and good article,thankyo for sharing your knowledge,keep posting such information that's helpful to others

Devops online training
Best Devops online training
Devops online training in Hyderabad
Devops online training in india

Unknown said...

I have read your article; it is very instructive and valuable to me. I admire the valuable information you offer in your articles. Thanks for posting it.
power bi training in hyderabad
best power bi class room training in hyderabad
power bi class room training in hyderabad
power bi training in india

Katleen Garcia said...

Great help but I'd rather hire a custom software application development company coz it's easier.

BrnInfotech said...

Nice Blog, I really wonder to visit your blog, Thanks a lot! for sharing the useful Information.
mobile application training in hyd
iphone app training course
Best ios training in Hyderabad
ios app development course
Mobile App Training Institutes

katetech said...

Thank you for your post. This is useful information.
Here we provide our special one's.
creative website designing services
top Mobile App Development Companies
list of Digital marketing companies

katetech said...

Thank you for your post. This is useful information.
Here we provide our special one's.
creative website designing services
top Mobile App Development Companies
list of Digital marketing companies

Unknown said...

Nice Posting !! Thanks for sharing..
Docker Training in Hyderabad
Docker and Kubernetes Online Training
Docker Training
Docker Online Training
Kubernetes Online Training
Kubernetes Training in Hyderabad
Best Docker and kubernetes training in ameerpet
Docker and Kubernetes Training in Hyderabad

Mika Farron said...

Membaca gaya bermain lawan. Apabila sebelumnya telah berhasil mengelabui lawan untuk tidak membaca rencana anda. Sekarang giliran anda yang membaca gaya permainan lawan.
bandar ceme terbaik
paito warna terlengkap
forum prediksi

Mac pro said...

Nice article admin thanks for share your atricle keep share your knowledge i am waiting for your new post check hi vis jacket girls knee high socks kindly review and reply me

Surya Informatics said...

Very informative article for all techy guys.
Surya Informatics

Dale Morris said...

Microsoft Edge Customer Service Number
Mozilla firefox Customer Support Number
Outlook Customer Support Phone Number
Sbcglobal Support Phone Number
Yahoo Mail Contact Number Canada

SkolarSolutions said...

Nice Post. To get study abroad in any course. For students who is looking for study medicine in abroad, we will help with end to end services with zero cost.
Mbbs in Russia
Mbbs in UK
Mbbs in Malaysia

Best essay writing services said...

Enrapturing article! Grateful to you for sharing them! I trust you will keep having identical shows on share with everybody! I believe various individuals will be puzzled to look at this article!

Essays SOS said...

Wow..! It is really an excellent blog post.Here the author presented the main points in a clear and understanding way. Good job.
Web Reference:Essay Writing Service

Docker and Kubernetes said...

Good post! keep sharing..
Docker Online Training
Kubernetes Online Training
Kubernetes Training in Hyderabad
Docker and Kubernetes Training in Hyderabad

Quickbooks Payroll said...

Nice Article. We are authorised support partner in Quickbooks Payroll. If you required any help for Quickbooks Payroll Support Phone Number 1-800-986-4607 if you are Expand your business to a new hike, with progressive approach. Seeking for the best accounting software? Then, get quickbooks installed in your system. The software proves to be more profitable to the business.

kissasian said...

KissAsian is Asian Dramas Platform where you can find all Korean, Chinese, Japanese dramas.

Gogoanime | Watch gogo anime online, English anime online HD

E-Learning Docker Kubernetes said...

Thank you for Sharing Excellent article
Docker Online Training
Kubernetes Online Training

Chandra Sekhar Reddy said...

Thanks for sharing
Yaaron Studios is one of the rapidly growing editing studios in Hyderabad. We are the best Video Editing services in Hyderabad. We provides best graphic works like logo reveals, corporate presentation Etc. And also we gives the best Outdoor/Indoor shoots and Ad Making services.
video editors studio in hyderabad
short film editors in hyderabad
corporate video editing studio in hyderabad
ad making company in hyderabad

Chandra Sekhar Reddy said...

Nice Information
"Sanjary Academy provides excellent training for Piping design course. Best Piping Design Training Institute in Hyderabad,
Telangana. We have offer professional Engineering Course like Piping Design Course,QA / QC Course,document Controller
course,pressure Vessel Design Course, Welding Inspector Course, Quality Management Course, #Safety officer course."
Piping Design Course in India­
Piping Design Course in Hyderabad
Piping Design Course in Hyderabad
QA / QC Course
QA / QC Course in india
QA / QC Course in Hyderabad
Document Controller course
Pressure Vessel Design Course
Welding Inspector Course
Quality Management Course
Quality Management Course in india
Safety officer course

E-Learning Docker Kubernetes said...

I have read your blog its very attractive and impressive.
Docker Online Training
Kubernetes Online Training

DevOps said...

Thanks good information.keep blogging Really it was an awesome article...
DevOps Online Training in Hyderabad
DevOps Training Online

Martina Roger said...

If you have never used assignment solution from, and wondering “Is My assignment help legit”, "what are My Assignment Help reviews"? you need to go through the MyAssignmenthelp reviews that are posted by the students. Those reviews offer a proper insight into the services of and let you know if MyAssignmenthelp is a genuine assignment help provider or not.

American Football said...

championship belts

Quickbooks Payroll said...

Nice Blog ! Our team is available every time for your help. They are carrying years of experience and can solve any QuickBooks error in a very short span of time. What are you waiting for now? Dial QuickBooks Payroll Support Phone Number 1-800-986-4607.

E- learning Docker kubernetes said...

Very informative Blog!! Thanks for sharing...
Docker Online Training
Kubernetes Online Training
Kubernetes Training in Hyderabad
Docker and Kubernetes Training in Hyderabad

yathish said...

The great information that you shared. It will help all of them. Thanks for posting. Keep maintain the updates
PHP development company|
PHP development company in chennai|
Ecommerce website builder|

Bahsegel said...

Bahsegel bahis sitesi canlı spor bahisleri ve casino oyunları ile kesintisiz hizmet vermeye devam ediyor. Türkiye’nin en eski ve kaliteli bahis sitelerinden biri olan Bahsegel bahis sitesi ile sizde kolayca kazanabilirsiniz.

Ngsbahis said...

Ngsbahis canlı casino ve bahis sitesi kazandırmaya devam ediyor. Onlarca yıllık bahis tecrübesi ile bahisçilere en kaliteli bahis hizmetini veren siteye sizde hemen üye olabilirsin. Şirketin Yüksek bahis oranları ve çok özel bonusları ile sizde hemen kazanmaya başlayabilirsiniz. Site yeni adresi üzerinden bahisçilere kesintisiz hizmet vermeye devam etmektedir. Üye olmak ve giriş yapmak için linke tıklamanız yeterlidir.

Betpas said...

Betpas canlı bahis sitesi yurt dışında uzun süredir faaliyet göstermektedir. Türkiye bahis piyasına 2 sene önce giren şirket bahisçiler tarafından büyük ilgi görmektedir. Diğer bahis sitelerinden karşılaşmanız mümkün olmayan çok yüksek bahis oranları ile betpas sitesinde kazançlı bahisler yapabilirsiniz. Site tüm Btk engellemlerine rağmen hizmetlerinden devam etmektedir. Yüksek bahis oranları ve çok özel bonuslar ile sizde hemen kazanmaya başlayabilirsiniz. Üye olmak için acele edin.

Nextgenassist said...

Uniquoe is the Best Digital Marketing Company in India offering Best Digital Marketing Services to
its clients across all over the globe at a very reasonable price range.
Best IT Services Provider Company in Delhi
Digital marketing services in delhi
web development services in delhi
seo services in delhi ncr
best makeup artist in gurgaon

Uniquoe said...

best interior designers in gurgaon

Arun said...

I really enjoyed your blog Thanks for sharing such an informative post.
Web Designer in Noida
Best Website Development service In Noida
Website Designing service In Noida
Best digital marketing service In Noida
Best digital marketing Company in Noida
Indian Bookmarking list
Indian Bookmarking list
India Classified Submission List
Indian Classified List

Site Meter