packages/CIS-Hardening
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: packages:37fe0cc0e205661109d803bf790ca56ae372cf24
Branches Tags
packages:master
..
compare: packages:b6b4e9af7ffea8f1c577dc1f16653e0b8973bb5b
Branches Tags
packages:master

2 Commits
37fe0cc0e2 ... b6b4e9af7f

Author SHA1 Message Date
Gabriel Gendron
b6b4e9af7f change 2024-03-18 16:03:39 +01:00
Gabriel Gendron
3e20aff160 aaa 2024-03-18 16:02:54 +01:00
4 changed files with 48 additions and 47 deletions
Expand all files Collapse all files

88
WAPT/control
View File

@@ -1,44 +1,44 @@
package : comi-hardening package : comi-hardening
version : 1.0-4 version : 1.0-5
architecture : all architecture : all
section : base section : base
priority : optional priority : optional
name : comi-hardening name : comi-hardening
categories : System and network categories : System and network
maintainer : ComiTeam maintainer : ComiTeam
description : Audit FreeSpace description : Audit FreeSpace
depends : depends :
conflicts : conflicts :
maturity : PROD maturity : PROD
locale : all locale : all
target_os : all target_os : all
min_wapt_version : 2.0 min_wapt_version : 2.0
sources : sources :
installed_size : installed_size :
impacted_process : impacted_process :
description_fr : description_fr :
description_pl : description_pl :
description_de : description_de :
description_es : description_es :
description_pt : description_pt :
description_it : description_it :
description_nl : description_nl :
description_ru : description_ru :
audit_schedule : 24h audit_schedule : 24h
editor : editor :
keywords : keywords :
licence : licence :
homepage : homepage :
package_uuid : 94017ac5-23b8-4507-b73b-a0160c4bc170 package_uuid : 1b55c367-39f8-4b2d-92a4-a36a70fcc28b
valid_from : valid_from :
valid_until : valid_until :
forced_install_on : forced_install_on :
changelog : changelog :
min_os_version : min_os_version :
max_os_version : max_os_version :
icon_sha256sum : 0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a icon_sha256sum : 0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a
signer : ggendron_pem signer : ggendron_pem
signer_fingerprint: 244cdf15fa2ea3ead58e4abf232fdf9a30a8a28a798677f71d6a3e76e65f9003 signer_fingerprint: 244cdf15fa2ea3ead58e4abf232fdf9a30a8a28a798677f71d6a3e76e65f9003
signature_date : 2024-01-31T14:49:22.000000 signature_date : 2024-03-18T14:51:46.000000
signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes signed_attributes : package,version,architecture,section,priority,name,categories,maintainer,description,depends,conflicts,maturity,locale,target_os,min_wapt_version,sources,installed_size,impacted_process,description_fr,description_pl,description_de,description_es,description_pt,description_it,description_nl,description_ru,audit_schedule,editor,keywords,licence,homepage,package_uuid,valid_from,valid_until,forced_install_on,changelog,min_os_version,max_os_version,icon_sha256sum,signer,signer_fingerprint,signature_date,signed_attributes
signature : nTsjYl7qAomJuOMQnYgq74jjtRwbW7kvZ0O1lHWpzz8++/fnvCQuogike/jKeTeUb/vpJM8NWeOgJM9a3XFGRqb1O9JgPlqc6nYXCEv8NS85am3pLdBody0AkzhuZscQL3NRZKVQL/F8M+6i7zEHM+h4ANKlw1vvZ1JXDU2LPpBbA4Ca4WqLvpYt9CdoyxQ+s95iIzxDvb8TqlgJkVb1jmlZBy34GLoxW/yezHORCDdNOryApWKwpSun3lAHCuy97qPS4i7+x+3JqfTMoqLK9h/4DtH4I5GhY1hZSBmx06rSVgfWqUx8AL+dHDd+eYIfaGOwv5B7sY1IV3hYVMqpkA== signature : PRu7i9MlIfT7VU6/xjZ1k4x6T/DXyc7dSM16FIk5GkjDqpEqzmZ1ucSUXCjx2dPPJVbr04NQJqT0Qc+TEUrJGgfyc2zhG/sY8qzteEafhtwO/wXpAAXek00ncj79Fa0PfitCGJoZxsEf/ZU8hBa33w/ygTDPutVL/hQ0FKDpYuANp1Bo/CfOqbW68tsdaxgX5zOWC5qM9CuHuWbIuI6pFWa2ODEU8d0nu4P6bWDLyOXoP2BLISw7PdnKk16JE2T7cQ1BCd7RRr7RntHJj9BGZ9CJBzasuQ9sR4T7ACkf+yD4+uSFdk8Xv6e0TmTf6/tYvg0sIiLM3CaRpVSOzVApGA==

2
WAPT/manifest.sha256
View File

@@ -1 +1 @@
[[".env","720b2be3b2d977425b68892f478262e7d3f764ca56c86e4d6aa2f639ea3dd214"],[".vscode/launch.json","7185f7797616d2fefe06cdb959ccb08bf0f677287a21aacc3111a65d4f072584"],[".vscode/settings.json","c4ef3e7d26642471ae3a2faaa131a40791fda1542ede085de266c5144adb2a3c"],["WAPT/certificate.crt","68194bca04eef7aaf4dc3c3bd12b017a1263bb5fcc034919fc7edda0c62db266"],["WAPT/control","6db7ce53ee117173b3a99095819d524f54009a58c6ae0b8885df5eceebe56def"],["WAPT/icon.png","0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a"],["WAPT/wapt.psproj","c6246be77fa0d87cb8860fc9de433dfc02b56edaaca368712d5b6267141eeee4"],["luti.json","b87e0aebd9b5bc3c009a98e4416e9bf9e83f1961419027c1cad02b2645f995dd"],["setup.py","aa04e8170a9780d10cbd5009d3367a6c5ca5146a17796d7a10bb22a9bfd42f1e"],["update_package.py","d53fbebc6ddbd12841df51c7805827dba99ac2a8455aec757433e8fd23692553"]] [[".env","720b2be3b2d977425b68892f478262e7d3f764ca56c86e4d6aa2f639ea3dd214"],[".vscode/launch.json","7185f7797616d2fefe06cdb959ccb08bf0f677287a21aacc3111a65d4f072584"],[".vscode/settings.json","c4ef3e7d26642471ae3a2faaa131a40791fda1542ede085de266c5144adb2a3c"],["README.CSV","22dd78a4853cb10c91896d896adb761a757f190e6dce0462ff3ed43cedb56237"],["WAPT/certificate.crt","68194bca04eef7aaf4dc3c3bd12b017a1263bb5fcc034919fc7edda0c62db266"],["WAPT/control","00109f5ac0be7f7397f0f9f248408e03307c3a2950c2cfbc6e54cceea964b1c9"],["WAPT/icon.png","0c223120ac1a6e4cd0d0abe04cd831c7d4a4c2661947e758c0f703b656933d9a"],["WAPT/wapt.psproj","c6246be77fa0d87cb8860fc9de433dfc02b56edaaca368712d5b6267141eeee4"],["setup.py","5cec9433a44fb8bc2a4c68b613b628f040287667150f28ba749f2041ede0c8ee"]]

2
WAPT/signature.sha256
View File

@@ -1 +1 @@
b0WhNtQnQl3tiO3L1SdlPXvCFuyWyYa5Uobv8Tqufj+JbknsluqqQCPGAtP14cPBNS0pGBBdtQKeZkg5jDoi68QbZQU1UmeRqCHy4egYw93zrlT+XeRRrr07G+5Z+IB3pIyrXtCQH6ih2lBTQ+EcsF/lUdeiKmCBZxPXWIUFssbGEntPQNHIUp8qbvW0fazfJN7QmDDw9/i0+FOO9SwKzAZr0Kjy1efWV9QkZtI8+hzjkNRZI0tGqmPMfVcoKHB+1x8yq3De5o8s8TYum2cCSJHfAvIe+S2x0wxBoaC9Ynf/QZpJOwzsoEhjv57QlFRhKz8GTBqtYn3cZuGeRbA8dg== kme8NcsT03G19j7YWhQ/IZFcbZuxgAI9Tfs1dyQomNAN6vKyJSuKbrp/V5U0vtBFbFZVXheRoQ0Kdriy5oY0P28lK6ImVIjPeuFep4ZGFDNL89ZsFG3tEf9o5hOI1w13ut6oN4Kqqd4T/nn4QpAq4pPY9uIL5U6J2DNvpAVscsX2sUy2GVQSgom5py46+hXuz/p9MzIECwJUoACGVqrC8SrRohck3QEXu3cdL3BznjLy/VWbffNkG5UP3aPfogSqCDzTWzYwp12+tBeSEKG2HIyXkEmOZBwRm5TOpptkLzBJoyxicIIyYEUglFfKp9KUc+/53rkOLMEIASXmlFZyJg==

3
setup.py
View File

@@ -130,7 +130,8 @@ def install():
#CIS - Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'. #CIS - Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "FilterAdministratorToken","1") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "FilterAdministratorToken","1")
#CIS - Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation #CIS - Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorUser","0") # registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorUser","0")
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "ConsentPromptBehaviorUser","1")
#CIS - Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation #CIS - Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation
registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableInstallerDetection","1") registry_set(HKEY_LOCAL_MACHINE, r"Software\Microsoft\Windows\CurrentVersion\Policies\System", "EnableInstallerDetection","1")
#CIS - Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. #CIS - Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'.