Linux Hardening Audit

Audit local Linux configuration snapshots for common hardening gaps.

Job Signal

This repository is designed to demonstrate readiness for: security analyst, systems security engineer, cybersecurity instructor.

Problem

Entry and mid-level security roles often expect practical host-hardening knowledge without requiring live system access.

What It Shows

• Analyze saved sshd_config, sysctl, and passwd-style snapshots.
• Flag root SSH login, password auth, IP forwarding, and UID 0 duplicates.
• Use local fixtures only, making it classroom and portfolio friendly.

Quickstart

python -m pip install -e .
python -m unittest discover -s tests
python -m linux_hardening_audit examples/snapshot.json

Portfolio Talking Points

• I can turn ambiguous security work into repeatable workflows.
• I can write clear documentation for analysts, engineers, and learners.
• I can build safe, local-first examples that avoid real secrets and third-party targets.

Roadmap

See docs/roadmap.md.

Safety

This project is for defensive security, education, and local synthetic data only.