Charles N Wyble
67c106a3b6
- Move documentation to docs/ directory for better organization - Add bin/ directory for utility scripts - Add lib/ for shared library functions - Update all build scripts to ensure strict Docker compliance - Enhance AGENTS.md with Docker container requirements - Create comprehensive compliance and security documentation - Reorganize test suite with improved structure - Remove obsolete Dockerfile and archive documentation - Add final security compliance report BREAKING CHANGE: Restructured project layout with moved documentation directories 💘 Generated with Crush Assisted-by: GLM-4.6 via Crush <crush@charm.land>
33 lines
655 B
Bash
Executable File
33 lines
655 B
Bash
Executable File
#!/bin/bash
|
|
# Security hardening hook for live system
|
|
set -euo pipefail
|
|
|
|
echo "Applying security hardening..."
|
|
|
|
# Apply security hardening functions from proper volume path
|
|
# shellcheck source=/build/src/security-hardening.sh
|
|
source /build/src/security-hardening.sh
|
|
|
|
# Create WiFi module blacklist
|
|
create_wifi_blacklist
|
|
|
|
# Create Bluetooth module blacklist
|
|
create_bluetooth_blacklist
|
|
|
|
# Configure SSH
|
|
configure_ssh
|
|
|
|
# Configure password policy
|
|
configure_password_policy
|
|
|
|
# Configure system limits
|
|
configure_system_limits
|
|
|
|
# Configure audit rules
|
|
configure_audit_rules
|
|
|
|
# Enable auditd service
|
|
systemctl enable auditd
|
|
|
|
echo "Security hardening completed."
|