Hey,
So I have been apart of this community for a few years and decided to make a script to Auto Secure(Harden) cpanel. There are a few reasons for me releasing this script lets start.
I think (Most/Some) of the Hosting community hasn't been doing its job to secure clients sites/data on a server level.
I wanted to help a few people who don't know much about Security and/or to make it more convenient to take a few steps to secure their cpanel.
Helping to Secure the future as we have all seen way to many recent security breach down to misconfigurations.
This script is in the beta phase (Harden v0.5 Beta)and will do the following:
Basic hardening of sysctl.conf
Disable SeLinux
Secures PHP
Configure CSF Custom Firewall Rules
Passive ports (Optional)
Secure SSH
Changes SSH port(optional)
Secures /etc/named.conf
Disables IPv6
Secures Httpd.conf
Adds rules to
/etc/host.conf
/etc/security/limits.conf
Mount Temp and Secure(Optional)
Secures Mysql
Turns off Unnecessary Processes
Installs Following Software:
Cpanel (optional)
ClamAV
RKHunter
This is pretty basic stuff at the moment but as I have said v0.5, With this being said I am open to all Suggestions written here or email to me via admin@samuraibit.com also please check out our website at http://samuraibit.com and Help Support this Project and future Projects to come(It will be updated to look nicer later on this week)
There is also stuff we have held back releasing which we hope to put in later versions of this, Here are a couple of things you can look forward too!
Mod_Security- With Custom config
Securing FTP settings
and a ton more
Installation Instructions Below:
wget http://projects.samuraibit.com/autosecure/harden.sh
chmod 0755 harden.sh
sh harden.sh