OS Manuals

/usr/bin/apply-hardening

Script to apply hardening

From harden-vm 0.0.4-r10 (enterprise-packages), captured 2026-11-08 by running apply-hardening --help (exit 0). permalink

usage: apply-hardening --profile PROFILE [--runtime-remediate] [--sysroot SYSROOT]

  Apply system hardening measures to a directory tree.

    options:

      -h | --help               show this help text
           --profile PROFILE    which set of hardening measures to apply,
                                only valid profile currently is: cis-level-1
           --runtime-remediate  restart services, reload configuration
           --sysroot SYSROOT    filesystem root of the system to harden,
                                defaults to /
Options (4)
OptionDescriptionSource
-h, --helpshow this help texthelp
--profile PROFILEwhich set of hardening measures to apply, only valid profile currently is: cis-level-1help
--runtime-remediaterestart services, reload configurationhelp
--sysroot SYSROOTfilesystem root of the system to harden, defaults to /help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.