host-security-audit

A Linux host security audit evaluates fwupd HSI levels, TPM/BootGuard, secure boot, kernel lockdown, and power management to identify vulnerabilities. This skill automates the assessment, applies necessary configurations, and generates detailed reports tracking findings and fixes.

Kernel lockdown is a security mode restricting kernel features to prevent unauthorized modifications when secure boot is active. This skill audits your kernel parameters and boot configuration, applying necessary fixes to ensure your boot process maintains a hardened security baseline.

Yes, fwupd and mokutil are required dependencies to audit TPM and BootGuard settings. The skill also relies on systemd, grub, and gnome-session-binary to perform the comprehensive security assessment and apply automated hardening configurations.

You can harden your Linux laptop's firmware by auditing fwupd HSI levels and secure boot settings. This skill identifies hardware and firmware vulnerabilities, applies automated fixes for boot parameters, and tracks limitations to strengthen your security baseline.

Automating secure boot fixes and BIOS settings faces limitations because certain configurations require manual BIOS intervention. This skill details these constraints in its reporting, tracking findings, applied fixes, and specific limitations regarding firmware and power management.

Yes, this security audit skill is designed for Linux laptops and workstations running systemd and grub. It checks your fwupd HSI levels, TPM/BootGuard, and kernel lockdown status to apply necessary hardening configurations for your specific environment.