Skip to content

int0x80/SweetSecurity

 
 

Repository files navigation

Overview

This is a refactor of Travis F. Smith's SweetSecurity repository for building a defensible Raspberry Pi. User should have sudo privileges to install software and situate configuration files on the filesystem.

Improvements

  • Upgraded versions of Bro and ELK stack to current
  • Changed from hardcoded pi user to configurable working directory INSTALL_DIR
  • Reduced privileges where possible to run commands unprivileged as the user
  • Silenced echo of Critical Stack API key and email password with read -s
  • Moved logical groupings of code into individual functions
  • Added integrity verification of downloads where possible: Bro (signature), ELK (SHA-1)
  • Submitted ticket to Critical Stack to add their deb into their repository with signing key and signature
  • Ported deprecated init code (update-rc.d, service, etc) to systemd current equivalent with systemctl
  • Created start_kibana and stop_kibana scripts for use with systemd invokation
  • Replaced deprecated init.d/kibana with current system/kibana.service
  • Exported intel.criticalstack.com certificate for use with Critical Stack deb download
  • Commented out code for blacklisting Tor exit nodes. Use Signal. Use Tor.

Issues Addressed

A number of issues and pull requests are sitting Open on the original repository so some of the issues were addressed.

About

Create a defensible raspberry pi

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages

  • Shell 100.0%