Skip to content

Latest commit

 

History

History
44 lines (25 loc) · 1.3 KB

README.md

File metadata and controls

44 lines (25 loc) · 1.3 KB
Raw

OpenSSF Scorecard

Gpetto

Nmap scan the local machine, report any surprising open ports to syslog and shutdown the interface if needed.

Installation

The script can be installed by cloning the github repository:

$git clone https://github.com/MatthewBuchananAstley/Gpetto.git

Or via the excellent ubuntu snap software distribution system:

$snap install gpetto --devmode --edge

Usage

./gpetto

For your information: the utp port scanning is only available as the root user

Configuring exceptions to the rule

Services that need to have an open port can be defined in gpetto_allowlist.conf. The line that appears in the nmap scan output can be used. For instance:

127.0.0.1 25/tcp open  smtp

gpetto_allowlist.conf goes in /etc/security/gpetto_allowlist.conf

Gpetto scan at boot time

The systemd service file to have the script check the system at boot time:

gpetto.service goes in /lib/systemd/system/gpetto.service

systemctl enable gpetto

or manually create the symlink in:

cd /etc/systemd/system/default.target.wants ;
ln -s /lib/systemd/system/gpetto.service gpetto.service

Versions

gpetto v1.0.0