mirror of
				https://github.com/jtesta/ssh-audit.git
				synced 2025-10-30 13:05:26 +01:00 
			
		
		
		
	Updated README.
This commit is contained in:
		| @@ -87,7 +87,7 @@ To audit a client configuration, with a listener on port 4567: | |||||||
| ssh-audit -c -p 4567 | ssh-audit -c -p 4567 | ||||||
| ``` | ``` | ||||||
|  |  | ||||||
| To  list all official built-in policies (hint: use resulting file paths with `-P`/`--policy`): | To  list all official built-in policies (hint: use resulting policy names with `-P`/`--policy`): | ||||||
| ``` | ``` | ||||||
| ssh-audit -L | ssh-audit -L | ||||||
| ``` | ``` | ||||||
| @@ -107,7 +107,7 @@ To run a policy audit against many servers: | |||||||
| ssh-audit -T servers.txt -P ["policy name" | path/to/server_policy.txt] | ssh-audit -T servers.txt -P ["policy name" | path/to/server_policy.txt] | ||||||
| ``` | ``` | ||||||
|  |  | ||||||
| To create a policy based on a target server (which can be manually edited; see official built-in policies for syntax examples): | To create a policy based on a target server (which can be manually edited): | ||||||
| ``` | ``` | ||||||
| ssh-audit -M new_policy.txt targetserver | ssh-audit -M new_policy.txt targetserver | ||||||
| ``` | ``` | ||||||
| @@ -117,7 +117,7 @@ Below is a screen shot of the standard server-auditing output when connecting to | |||||||
|  |  | ||||||
|  |  | ||||||
| ### Server Policy Audit Example | ### Server Policy Audit Example | ||||||
| Below is a screen shot of the policy auditing output when connecting to an un-hardened Ubuntu Server 20.04 machine: | Below is a screen shot of the policy auditing output when connecting to an un-hardened Ubuntu Server 20.04 machine (hint: use `-L`/`--list-policies` to see names of built-in policies to use with `-P`/`--policy`): | ||||||
|  |  | ||||||
|  |  | ||||||
| After applying the steps in the hardening guide (see below), the output changes to the following: | After applying the steps in the hardening guide (see below), the output changes to the following: | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user
	 Joe Testa
					Joe Testa