DevSec Hardening FW

As announced yesterday, every @DevSecIO @chef #Inspec profiles migrated from `attribute` to `input` dropping support for Inspec v3 github.com/dev-sec

Because @chef #Inspec changed 'attribute' for 'input', we modified @DevSecIO profiles accordingly. Tell us if it breaks your builds. github.com/dev-sec/cis-di… github.com/dev-sec/linux-… github.com/dev-sec/ssh-ba… github.com/dev-sec/cis-ku…

Thanks to @DevSecIO, there is a one-stop shop for all your DevSecOps hardening needs + inspection using InSpec + remediation using @ansible, @chef and puppet: github.com/dev-sec #devops #DevSecOps #automation

@journeyer We set some ufw rules as part of the sysctl configuration. Likely we do not have firewall setup as you expect. Contributions to crate a firewall role are welcome.

@DevSecIO do you have firewall setup in any of your hardening ansible roles? Did not see them in the os_hardening collection.

TIL about the "proc" file system on Linux. It gives you access to all process information. I have used the @DevSecIO Hardening Framework. A day later my monitoring software couldn't get process statistics anymore. The total number of processes displayed was 2.

You were thinking what would make our @ansible server security roles even better? 🚀 We made it a lot easier to use them via ansible collections. Testing and quality are up! 🎉Thank you @zufallsheld and all contributors dev-sec.io/blog/2020-10-1…

Watch @MicheeLengronne talk about #devsecops! It covers vault, ansible and our devsec automation. twitch.tv/videos/7692367… 🇫🇷

Great work 👍🏻 @zufallsheld @MicheeLengronne Having more automated releases makes our open source content even more reliable.

Automatically harden your Ubuntu server with the open source tools #Chef #Inspec, #Ansible and the @DevSecIO framework: blog.openbloc.com/automated-hard… #ubuntu #opensource #devops #devsec #devsecops #devtools #cybersecurity

@p35h4y It maybe an issue with inspec, the ssh_custom_path is an attribute with default value. Would you mind open an issue in github for the issues so that the community can help? In case you think documentation is missing, we are happy to accept PRs to add the information you need

🥳🥳Lets celebrate 400 🌠 stars for our #linux security baseline. A big thank you 🙏🙏🙏 to all contributors.

Erlauben Eure AWS Security Groups den uneingeschränkten SSH Zugriff? Testen bitte! centrias.de/blog/security-… #inspec #aws /cc @chri_hartmann & @DevSecIO

chef-ssh-hardening v2.9.0 with EL 8 support is released github.com/dev-sec/chef-s… @DevSecIO

Teaching #DevOps best practices and supporting tools. @gitlab @kitchenci @DevSecIO @ansible @chef @puppetize @cincproject @HashiCorp

Made a containerized custom Allure reporter for the @DevSecIO Inspec CIS benchmarks, as well as a containerized benchmark runner. Allure gives a nice overview, compliance trend, and human readable test description/rationale. Check it out! hub.docker.com/r/presidenten/…

@q2dg We are using InSpec and you can execute them like Ansible and Chef recipes. All baselines are open source, too. Eg. github.com/dev-sec/linux-…

@0x663030623472 @jensschanz @stankowic_devel Always great to see @DevSecIO in the wild 😜

@jensschanz @stankowic_devel @DevSecIO kennst du?

🥳We had a great start into @haacktoberfest! Help us to fill the In-Progress column with your contribution 🏆. Let us make the world more secure place! Have a look at github.com/orgs/dev-sec/p… for open issues. #opensource #security for #devops #devsec #ansible #chef #puppet #inspec

Help us to improve our open source #security automation! We participate in @hacktoberfest with our @ansible @chef @puppet and #inspec projects. See dev-sec.io/blog/2019-10-0… for more details.

@nickdothutton @chef @OpenPolicyAgent @ansible @thismarkp @DevSecIO has a bunch of templates already that can be used off the shelf to Check compliance and apply the hardening.