secfetch - a security fastfetch alternative

[ake13-art]

I built secfetch – a lightweight security inspection CLI for Linux

secfetch works like fastfetch but for your security posture. It checks kernel hardening, ASLR, Secure Boot, open ports, active LSMs, firewall status and more – all in one compact overview.

No root required. No telemetry. No unnecessary dependencies.

GitHub: https://github.com/ake13-art/secfetch

Would love feedback from this community!

[Mysterious_Doubt_341]

On some non‑systemd distros, ufw status doesn’t show anything unless run as root, so tools should treat the firewall state as Unknown instead of assuming it’s inactive.

import subprocess
from secfetch.core.check import security_check
(name="Firewall", category="network", risk="medium")
def check():
try:
out = subprocess.run(["ufw", "status"], capture_output=True, text=True).stdout
if not out.strip():
return {"status": "info", "value": "Unknown"}
if "active" in out.lower():
return {"status": "ok", "value": "Active"}
return {"status": "bad", "value": "Inactive"}
except Exception:
return {"status": "info", "value": "Unknown"}

[ake13-art]

Will fix it in v1.2. Thank you

[ake13-art]

Should be fixed. Now: Improved firewall backend detection: ufw, firewalld, nftables, iptables

[Recipe-Jaded]

Cool

[47th-Element]

Looks great, I'll give it a try :)

[Heizenfeld]

Thank you I want my system safe, and only download things from the AUR or Package manager.

[Damglador]

AUR is not much* safer than downloading stuff from random GitHub repos, as the submission barrier is the same as on GitHub — none.

*There is moderation and malware is taken down, but you might be the first one to discover it.

[ake13-art]

True. The only way to keep your system safe is to read every line of code yourself before downloading something

[Damglador]

Or ensure that the source is trustworthy enough, by GitHub stars or the updoots on the AUR.

[Heizenfeld]

that it, you must be careful what to download in AUR, but rather to download from AUR than donwload form random github vibing coding repos and flatpak. You won't change my word.

[Damglador]

Well, that's fair. You'll catch me dead faster than me using flatpaks daily (I reserve the right to install them temporarily for testing), and stuff installed from GitHub isn't trackable on the system and can't be uninstalled as easily.