packages/CIS-Hardening
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: packages:28ba8aab8d8397603733e9b3dd223b084978c3e4
Branches Tags
packages:master
...
compare: packages:112c3dcf9fa31b9bc0330864ab044abd075b7a7e
Branches Tags
packages:master

2 Commits
28ba8aab8d ... 112c3dcf9f

Author SHA1 Message Date
Gabriel Gendron
112c3dcf9f aa 2024-03-18 17:03:45 +01:00
Gabriel Gendron
67b7a04e28 aaa 2024-03-18 17:03:39 +01:00
4 changed files with 8 additions and 8 deletions
Expand all files Collapse all files

8
WAPT/control
View File

@@ -1,5 +1,5 @@
package : comi-hardening package : comi-hardening
version : 1.0-10 version : 1.0-11
architecture : all architecture : all
section : base section : base
priority : optional priority : optional
@@ -29,7 +29,7 @@ editor :
keywords : keywords :
licence : licence :
homepage : homepage :
package_uuid : a192c3cd-d257-4353-8a67-73964a949f62 package_uuid : b41cdf0c-d71e-4c8c-bf33-b3ad8c0bb4f7
valid_from : valid_from :
valid_until : valid_until :
forced_install_on : forced_install_on :
@@ -39,6 +39,6 @@ max_os_version :
icon_sha256sum : 0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a icon_sha256sum : 0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a
signer : ggendron_pem signer : ggendron_pem
signer_fingerprint: 244cdf15fa2ea3ead58e4abf232fdf9a30a8a28a798677f71d6a3e76e65f9003 signer_fingerprint: 244cdf15fa2ea3ead58e4abf232fdf9a30a8a28a798677f71d6a3e76e65f9003
signature_date : 2024-03-18T15:33:52.000000 signature_date : 2024-03-18T15:46:57.000000
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes
signature : fV4ZWKR4phwahhKBPsemvb+++Z6D6ZDyNSWfp+ZfgrivM8rftKAXfFqnhDOLTtvgfpoDr+z7L9btWjdMIgcB6TZf8gt3VoE6n/ydLHD/OjxMIYJKImvFPPxJp+FrnZm8BWOAVXav3K6XIxCrvjs4g9FE/6i+Z4ghdWXgA2H/3WRZmdQLZUAEhRIc4K8eugL+EixUD6wR/hJfUayuzm1vEIflc67CwAyxEdiT2q967mmLwiPNLkSn0yNoQfFo7xmIsF2Hbgat1i4m9qHHJ3heLQPxIC7b4FszDltc2Vo5mdwwB+fBtxSfPSZC2YJcQ4EaBUpXI6+yVFfxLh8O9YlYkA== signature : n+qVKKPjtkCml6DF7vMxcGt8H/7jC67oN/spTY5g5UfmxjUARoeUWRbNIXjXrVFoImOgY9tEZr7LwBaajQz8fCd09PjKxi9xh06zR+Mjcakd1tWsz0uE9pdMFt3IMuJ/Mlio6sB7wseTXk0HKX6LuTYMjbdL3kA3qucwO8VFGGJ/889XXbNseifOySJvDh5IbINGBa80QAylDU82TZcl5cN6LGfuXL39F+UJ2iHoSc14libZooDZdVtQuSZsFKkaYAMvudXmibj6W5Lq8hEOdchasCTrs4Q40GO8jBIyIinGz17oOdtnEXIHUNvMvDahl85MADNfIUjyZXm9p58pKA==

2
WAPT/manifest.sha256
View File

@@ -1 +1 @@
[[".env","720b2be3b2d977425b68892f478262e7d3f764ca56c86e4d6aa2f639ea3dd214"],[".vscode/launch.json","7185f7797616d2fefe06cdb959ccb08bf0f677287a21aacc3111a65d4f072584"],[".vscode/settings.json","c4ef3e7d26642471ae3a2faaa131a40791fda1542ede085de266c5144adb2a3c"],["README.CSV","22dd78a4853cb10c91896d896adb761a757f190e6dce0462ff3ed43cedb56237"],["WAPT/certificate.crt","68194bca04eef7aaf4dc3c3bd12b017a1263bb5fcc034919fc7edda0c62db266"],["WAPT/control","35f21fcb619d2ea262a86f384bfafe725e70e0db0d615bd65cd1f37a7913cb5f"],["WAPT/icon.png","0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a"],["WAPT/wapt.psproj","c6246be77fa0d87cb8860fc9de433dfc02b56edaaca368712d5b6267141eeee4"],["setup.py","daac749d42ec112bfaf06bedf37e0f9e5106cbfee24ab3e03cf4428c1d5452e5"]] [[".env","720b2be3b2d977425b68892f478262e7d3f764ca56c86e4d6aa2f639ea3dd214"],[".vscode/launch.json","7185f7797616d2fefe06cdb959ccb08bf0f677287a21aacc3111a65d4f072584"],[".vscode/settings.json","c4ef3e7d26642471ae3a2faaa131a40791fda1542ede085de266c5144adb2a3c"],["README.CSV","22dd78a4853cb10c91896d896adb761a757f190e6dce0462ff3ed43cedb56237"],["WAPT/certificate.crt","68194bca04eef7aaf4dc3c3bd12b017a1263bb5fcc034919fc7edda0c62db266"],["WAPT/control","d4763870c226fae1453d6c4396d5c6d2bcdc7def92be8e12f86bb466d642182c"],["WAPT/icon.png","0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a"],["WAPT/wapt.psproj","c6246be77fa0d87cb8860fc9de433dfc02b56edaaca368712d5b6267141eeee4"],["setup.py","f8460e7107a81051f7969e943cb6bd0c47231029cae7ad12c84ae2b6d02297dd"]]

2
WAPT/signature.sha256
View File

@@ -1 +1 @@
iEhGMWXCHoGLfgPMAizljKCZByGpwWM3EFev5PsmWrITDyhyHdScM3sfIB9qqi0aHIcEpR4YwP+1U+C59oCfIYIq/lalolnZLdx5iwA3EPLIXnfAdFSlsgLOg4mSCe9Oxat25cjSdsgN6ahTQToNATk8HUK4pwbZmPuNI3APOMQUJ9zfqzN9kML/zWFX1pvZPaW2NIr7y7NMNtGRCOpk5ZA0wGrLRSGGuCWgyxenyv23KoEERjPD9Ru3orVH7h6U+uT00lPIxiCPZWxFdFXJ7VVv8g/ejxEY2ydIU8YrYqoW30Gc7UiwCVRMi6qjK61GYCxKwIRB9AH3cmJcGJXMYA== DZZ+qn4vd+SwZNaUjZjf1si2iOuBV4o88pwwaK7LDheUSRRSRM3RuIcIdXFgDBUuW0gAtzHuy/K1EK42dZV0vcramGMnuiXXMd2VuMIzKwYlUOW0c5KiXm576Isp2zzLc3tNnoizGuRkZugSsefkBHPCZioVd+ZNB/TS0OhIMFat4lY+YNshrcKOeO4sYSlRezVVbgu58tFUz+NP0nw0EHfl4tO8MnrxhNTR2Az9gHfdDol0v8Yo4DOoI28CfJXv8FNK0PYrkmZ874N+NtItGVEIfx2grPrCl90HNZYyVMc/m/jFPbqD3p12GNZyQvnFroVMwWYF9Kt6cRZ4QLjsDA==

4
setup.py
View File

@@ -134,13 +134,13 @@ def install():
# registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorUser","0") # registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorUser","0")
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorUser","1") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorUser","1")
#CIS - Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation #CIS - Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableInstallerDetection","0") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableInstallerDetection","1")
#CIS - Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. #CIS - Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'.
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableSecureUIAPaths","0") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableSecureUIAPaths","0")
#CIS - Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. #CIS - Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'.
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableLUA","0") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableLUA","0")
#CIS - Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'. #CIS - Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "PromptOnSecureDesktop","0") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "PromptOnSecureDesktop","1")
#CIS - Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'. #CIS - Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableVirtualization","1") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableVirtualization","1")
#CIS - Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'. #CIS - Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'.