Thursday, June 16, 2016 Automated Hardening Framework

Automated configuration management tools like Ansible, Chef and Puppet are changing the way that organizations provision and manage their IT infrastructure. These tools allow engineers to programmatically define how systems are set up, and automatically install and configure software packages. System provisioning and configuration becomes testable, auditable, efficient, scalable and consistent, from tens to hundreds or thousands of hosts.

These tools also change the way that system hardening is done. Instead of following a checklist or a guidebook like one of the CIS Benchmarks, and manually applying or scripting changes, you can automatically enforce hardening policies or audit system configurations against recognized best practices, using pre-defined hardening rules programmed into code.

An excellent resource for automated hardening is a set of open source templates originally developed at Deutsche Telekom, under the project name "". The authors have recently had to rename this hardening framework to

It includes Chef recipes and Puppet manifests for hardening base Linux, as well as for SSH, MySQL and PostgreSQL, Apache and Nginx. Ansible support at this time is limited to playbooks for base Linux and SSH. works on Ubuntu, Debian, RHEL, CenOS and Oracle Linux distros.

For container security, the project team have just added an InSpec profile for Chef Compliance against the CIS Docker 1.11.0 benchmark. is comprehensive and at the same time accessible. And it’s open, actively maintained, and free. You can review the rules, adopt them wholesale, or cherry pick or customize them if needed. It’s definitely worth your time to check it out on GitHub:


Andrew303john said...

Finance Assignment Help

We at bring to you the most significant Finance assignment writing service at the best cost. With long stretches of understanding we are prepared to give assignment help over the globe.You will be guided here with a portion of the information of Finance assignment which could assist you in deciding writing a Finance assignment. Nonetheless we uneuqivocally prescribe you to benefit Managerial accounting assignment help from our specialist to find out about marketing and its scope.

Unknown said...

If you're looking to lose pounds then you absolutely have to start following this brand new custom keto meal plan.

To create this keto diet service, certified nutritionists, fitness trainers, and cooks have united to develop keto meal plans that are effective, suitable, price-efficient, and satisfying.

From their launch in 2019, 1000's of clients have already remodeled their figure and health with the benefits a proper keto meal plan can offer.

Speaking of benefits; clicking this link, you'll discover 8 scientifically-confirmed ones offered by the keto meal plan.

William Smith said...

Thank you for this wonderful information share and excellent information providing by your article. Are you looking for assignment help services in Singapore? Do you require to finish your assignment? Singapore assignment help is a well-liked assignment Acquire immediate Assignment Help before completion of time at a fair cost. Kindly visit the LiveWebTutors website…

Alisah Wilson said...

Are you finding for homework assignment help? Try our topmost homework experts who can help you get A+ grade marks in your homework. Hire us now.

BestTrainingMumbai said...

You have made neural relationship in my cerebrum not used as normally as could be normal the situation being what it is. Thankful to you for getting my neurons bobbing.
SAP training in Kolkata
Best SAP training in Kolkata
SAP training institute in Kolkata

Anirban Ghosh said...

You have made neural relationship in my cerebrum not utilized as ordinarily as could be typical the circumstance being what it is. Appreciative to you for getting my neurons weaving.
SAP training in Mumbai
Best SAP training in Mumbai
SAP training institute Mumbai

CloudLearn ERP said...

There are many aspects of this article on which I concur with you. You have made neural relationship in my cerebrum not used as commonly as could be average the situation being what it is.
SAP training in Mumbai
Data Science training in Mumbai
Best data science training in Mumbai

official Viu said...

watch online movies

free movies online

hd online movies

hindi dubbed movies

online hindi movies

online movies




dentistcurie said...

Expected to form you a next to no word to thank you once more with respect to the decent recommendations you've contributed here.
dental clinics in chennai

rajani kota said...

Hi Very nice blog thank you for sharing this blog.
DevOps Training
DevOps Online Training

Balajee Nanduri said...

Nice Post. Keep updating more and more DevOps Online Training

Max Willor said...

That's exactly what I call a very successful message. It's so broad I don't need to hop anywhere else for the info. Great work, keep posting! At My Assignment Help Au, We Offer Pocket-Friendly Services And Write Tailored Assignments. Students Trust Our Assignment Help in Australia. To Get Authentic Assignments Within Deadlines, Hire Us Today!

Anu said...

i just go through your article it’s very interesting time just pass away by reading your article looking for more updates. Thank you for sharing DevOps Training in Chennai | DevOps Training in anna nagar | DevOps Training in omr | DevOps Training in porur | DevOps Training in tambaram | DevOps Training in velachery

augustwalker said...

The most effective method to Install Canon Printer. Group makes a wide assortment of printers, each with its own specific highlights and advantages, for example, the capacity to filter records or send faxes. In spite of the contrasts between the different printer models, every Canon printer utilizes a similar establishment technique, which you should perform

Sumit Kumar said...

Quickbooks Desktop stop responding

Quickbooks not responding error

Download and Install Quickbooks

Install Quickbooks Desktop

Quickbooks not responding

Site Meter