sudosecurity/hardline
2
0
Fork 0
Code Issues Pull requests Releases 9 Activity
9 releases 9 tags
  • v0.1.0 d32e712045

    Hardline 0.1.0 Stable

    Traven released this 2026-10-19 00:25:29 +00:00 | 75 commits to main since this release

    First public build. Hardline audits an Ubuntu 24.04 server against 43 controls, changes nothing without --commit, and reverts SSH and firewall changes unless you confirm from a new session.

    Released 2026-10-19.

    Added

    • audit, apply (dry run by default, --commit to write), confirm,
      rollback, diff, status and controls commands.
    • 43 controls across SSH, firewall, AppArmor, auditd, TLS and Docker, with
      baseline and stig profiles and Ubuntu 24.04 STIG/CCI references.
    • Guarded SSH and firewall changes: a revert timer plus a boot guard undo
      anything not confirmed from a new SSH session.
    • SHA-256 snapshots with mode and ownership, drift detection, and manual
      rollback that refuses to overwrite later edits without --force.
    • ufw backend, and an nftables backend that only owns table inet hardline.
    • JSON report schema version 1.
    • Project page at https://sudosecurity.org/hardline/, built from the controls
      by site/build.py. Every finding links to its section there.
    • Release archives have stable names (hardline-<target>.tar.gz), so
      releases/latest/download/ links always work.

    Install

    Prebuilt binaries are published for the latest release only. Use the latest release, or build this tag from source:

    git clone --branch v0.1.0 https://git.sudosecurity.org/sudosecurity/hardline.git && cd hardline
cargo build --release --locked

    Source: https://git.sudosecurity.org/sudosecurity/hardline/src/tag/v0.1.0

    Downloads