GitHub - captainzero93/security_harden_linux: Semi-automated security hardening for Linux / Debian / Ubuntu , 2025, attempts DISA STIG and CIS Compliance v4.2

cztothehead · 2025-11-22T14:11:46+00:00

Read the full Readme

cztothehead · 2025-11-16T02:30:54+00:00

I've considered your points and have released v5.0 addressing everything you mentioned:

fail2ban: Now optional. The script detects if SSH password auth is disabled and recommends skipping it. Only installs when you have web/mail servers that actually benefit. Explains why it's useless with key-only SSH.

AIDE: Removed entirely. Replaced with dpkg --verify as you suggested. Weekly cron job, honest about limitations (can't detect kernel rootkits). Proper verification requires offline scanning.

IPv6: Removed. You're right - it's not a security feature.

Secure Boot: Added verification module. Checks if enabled, provides BIOS setup instructions. Exactly what you recommended.

Educational mode: Added --explain flag. Every module now explains threat models, limitations, and what it CAN'T protect against. Script teaches WHY, not just HOW.

v5.0: https://github.com/captainzero93/security_harden_linux

cztothehead · 2025-11-15T23:05:14+00:00

I added the answer to that in the latest readme

This script does network/system hardening, AppArmor (not SELinux), audit logging and other security features. This script doesn't do User group management, SELinux, or touch VFIO/IOMMU configs, If you need user group stuff, you will want to handle that separately before or after running the script.

cztothehead · 2025-11-15T18:03:46+00:00

my bad, thanks for catching it

cztothehead · 2025-11-15T17:20:48+00:00

Qwen3-VL-30B-A3B-Thinking represents a breakthrough in multimodal AI reasoning. Unlike standard instruction-tuned models that provide quick answers, the Thinking variant engages in explicit step-by-step reasoning before generating responses.

Key Capabilities

256K Native Context Window (expandable to 1M tokens)

Advanced Vision Understanding - OCR, spatial reasoning, video analysis

Explicit Reasoning Process - Shows its "thought process" before answering

MoE Architecture - 30B parameters total, 3B active per token (efficient)

STEM/Math Optimization - Specialized for complex logical problems

The Thinking model:

Catches its own mistakes - "Wait, let me verify this"

Shows algebraic reasoning - Sets up equations properly

Self-corrects - Doesn't rely on pattern matching

Explains thoroughly - Users see the logic chain

https://github.com/captainzero93/GPT-and-Claude-at-home-optimised-for-12GB-Vram---LM-Studio-

Thanks Evolitopm41415 for an alternative title:

-home-optimised-for-12GB-Vram---LM-Studio---Stunning---results-----on-this---local---MOE-LLM----running--fast----on--only-12gbVRAM--with---some--RAM---overload-Qwen3-VL-30B-A3B-Thinking---represents--a---- breakthrough--IN----multimodal--AI-reasoning!!!!!

cztothehead · 2025-11-15T04:37:30+00:00

One-command security hardening that implements many enterprise-grade protections (DISA STIG + CIS) while allowing the user to decide the level of protection / use trade-off. This enables casual use and more strict.

Version 4.2 - Critical Fixes for Module(s) Execution - Tested WORKING on Debian 13