@@ -20,7 +20,7 @@ The security audit was conducted on an Ubuntu virtual machine configured as a se
2020* ` ip a `
2121
2222<p align =" center " >
23- <img src =" / assets/images/week_7/sc1_system_baseline_information.png" width =" 70% " >
23+ <img src =" assets/images/week_7/sc1_system_baseline_information.png " width =" 70% " >
2424</p >
2525
2626---
@@ -36,7 +36,7 @@ An initial security audit was performed using Lynis to assess the system’s sec
3636The initial hardening index reported by Lynis was ** 61** , highlighting several areas for improvement related to system hardening and security configuration.
3737
3838<p align =" center " >
39- <img src =" / assets/images/week_7/sc2_lynis_baseline_score.png" width =" 70% " >
39+ <img src =" assets/images/week_7/sc2_lynis_baseline_score.png " width =" 70% " >
4040</p >
4141
4242---
@@ -53,7 +53,7 @@ The Uncomplicated Firewall (UFW) was enabled to restrict unauthorized network ac
5353* ` sudo ufw status verbose `
5454
5555<p align =" center " >
56- <img src =" / assets/images/week_7/sc3_ufw_enabled_status.png" width =" 70% " >
56+ <img src =" assets/images/week_7/sc3_ufw_enabled_status.png " width =" 70% " >
5757</p >
5858
5959---
@@ -68,7 +68,7 @@ Kernel network parameters were hardened to improve protection against IP spoofin
6868* ` sudo sysctl -w net.ipv4.tcp_syncookies=1 `
6969
7070<p align =" center " >
71- <img src =" / assets/images/week_7/sc4_kernel_network_hardening.png" width =" 70% " >
71+ <img src =" assets/images/week_7/sc4_kernel_network_hardening.png " width =" 70% " >
7272</p >
7373
7474---
@@ -82,7 +82,7 @@ After applying the security improvements, the Lynis audit was re-run to reassess
8282* ` sudo lynis audit system `
8383
8484<p align =" center " >
85- <img src =" / assets/images/week_7/sc5_lynis_after_remediation.png" width =" 70% " >
85+ <img src =" assets/images/week_7/sc5_lynis_after_remediation.png " width =" 70% " >
8686</p >
8787
8888---
@@ -96,7 +96,7 @@ Network security testing was conducted using nmap from a Fedora virtual machine
9696* ` sudo nmap -sS -sV 192.168.56.101 `
9797
9898<p align =" center " >
99- <img src =" / assets/images/week_7/sc6_nmap_network_scan.png" width =" 70% " >
99+ <img src =" assets/images/week_7/sc6_nmap_network_scan.png " width =" 70% " >
100100</p >
101101
102102---
@@ -110,7 +110,7 @@ The SSH configuration was reviewed to ensure secure remote access practices were
110110* ` sudo sshd -T | grep -E "permitrootlogin|passwordauthentication" `
111111
112112<p align =" center " >
113- <img src =" / assets/images/week_7/sc7_ssh_security_verification.png" width =" 70% " >
113+ <img src =" assets/images/week_7/sc7_ssh_security_verification.png " width =" 70% " >
114114</p >
115115
116116---
@@ -124,7 +124,7 @@ Running services were reviewed to identify active components and justify their n
124124* ` systemctl list-units --type=service --state=running `
125125
126126<p align =" center " >
127- <img src =" / assets/images/week_7/sc8_running_services_list.png" width =" 70% " >
127+ <img src =" assets/images/week_7/sc8_running_services_list.png " width =" 70% " >
128128</p >
129129
130130### ** Selected Service Justification**
@@ -158,7 +158,7 @@ User access controls were reviewed to ensure compliance with the principle of le
158158* ` groups `
159159
160160<p align =" center " >
161- <img src =" / assets/images/week_7/sc9_user_group_membership.png" width =" 70% " >
161+ <img src =" assets/images/week_7/sc9_user_group_membership.png " width =" 70% " >
162162</p >
163163
164164Sensitive file permissions were also verified to ensure credential data protection. The ` /etc/shadow ` file was restricted to root and privileged groups, preventing unauthorized access to password hashes.
@@ -168,7 +168,7 @@ Sensitive file permissions were also verified to ensure credential data protecti
168168* ` ls -l /etc/shadow `
169169
170170<p align =" center " >
171- <img src =" / assets/images/week_7/sc10_shadow_file_permissions.png" width =" 70% " >
171+ <img src =" assets/images/week_7/sc10_shadow_file_permissions.png " width =" 70% " >
172172</p >
173173
174174---
0 commit comments