Claude Skills by CyberStrikeus

Ensure access to /etc/ssh/sshd_config is configured

Ensure sshd HostbasedAuthentication is disabled

Ensure sshd IgnoreRhosts is enabled

Ensure sshd KexAlgorithms is configured

Ensure sshd LoginGraceTime is configured

Ensure sshd LogLevel is configured

Ensure sshd MACs are configured

Ensure sshd MaxAuthTries is configured

Ensure sshd MaxSessions is configured

Ensure sshd MaxStartups is configured

Ensure sshd PermitEmptyPasswords is disabled

Ensure access to SSH private host key files is configured

Ensure sshd PermitRootLogin is disabled

Ensure sshd PermitUserEnvironment is disabled

Ensure sshd UsePAM is enabled

Ensure access to SSH public host key files is configured

Ensure sshd access is configured

Ensure sshd Banner is configured

Ensure sshd Ciphers are configured

Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured

Ensure sshd DisableForwarding is enabled

Ensure sshd GSSAPIAuthentication is disabled

Ensure sudo is installed

Ensure sudo commands use pty

Ensure sudo log file exists

Ensure users must provide password for privilege escalation

Ensure re-authentication for privilege escalation is not disabled globally

Ensure sudo authentication timeout is configured

Ensure access to the su command is restricted

Ensure latest version of pam is installed

Ensure latest version of libpam-modules is installed

Ensure latest version of libpam-pwquality is installed

Ensure pam_unix module is enabled

Ensure pam_faillock module is enabled

Ensure pam_pwquality module is enabled

Ensure pam_pwhistory module is enabled

Ensure password failed attempts lockout is configured

Ensure password unlock time is configured

Ensure password failed attempts lockout includes root account

Ensure password number of changed characters is configured

Ensure minimum password length is configured

Ensure password complexity is configured

Ensure password same consecutive characters is configured

Ensure password maximum sequential characters is configured

Ensure password dictionary check is enabled

Ensure password quality checking is enforced

Ensure password quality is enforced for the root user

Ensure password history remember is configured

Ensure password history is enforced for the root user

Ensure pam_pwhistory includes use_authtok