Difference between revisions of "Customizing Hardening Policies"

From khika
Jump to navigation Jump to search
Line 1: Line 1:
The KHIKA Hardening Compliance Report internally uses a sqlite database (www.sqlite.org) to maintain the hardening templates and customizing the hardening policy essentially means one has to update the database as per requirements. The KHIKA Hardening Compliance Report template's sqlite database is available on the KHIKA Application Server at the following location:
+
The KHIKA Hardening Compliance Report internally uses a sqlite database (www.sqlite.org) to maintain the hardening templates and the sqlite database is available on the KHIKA Application Server at the following location:
 
* For Windows Servers -> /opt/KHIKA/Apps/Dashboards_n_Reports/WIN_GRC/policy_db.dat  
 
* For Windows Servers -> /opt/KHIKA/Apps/Dashboards_n_Reports/WIN_GRC/policy_db.dat  
 
* For Linux Servers -> /opt/KHIKA/Apps/Dashboards_n_Reports/Linux_GRC/linux_policy.db
 
* For Linux Servers -> /opt/KHIKA/Apps/Dashboards_n_Reports/Linux_GRC/linux_policy.db
  
 +
Customization of Hardening policy may include anything from creating your own hardening policy template to editing an existing hardening policy. To know more, please read on:
 +
=== To edit an existing hardening policy ===
 +
The KHIKA Server Hardening mechanism internally uses an sqlite database to maintain the various hardening parameters and along with their expected values and in order to edit an existing hardening policy, you will need to update the sqlite database. This can be easily done by coping the appropriate policy database from the KHIKA Application server to the Windows Machine where SQLiteBrowser is available via WinSCP or any other equivalent utilities. Once the policy database sqlite file is copied to the windows server, open the policy database using SQLite Browser.
 +
 +
=== To create your own hardening policy template ===
 +
 +
 +
=== Policy Database ===
 +
 +
 +
 +
==== NOTE ====
 
To edit the sqlite database, it is recommended to use an open source utility named 'Sqlite Browser' which may be downloaded from the  
 
To edit the sqlite database, it is recommended to use an open source utility named 'Sqlite Browser' which may be downloaded from the  
 
https://sqlitebrowser.org/ (please review the license policy before downloading & using the sqlite browser utility).
 
https://sqlitebrowser.org/ (please review the license policy before downloading & using the sqlite browser utility).

Revision as of 10:12, 20 August 2019

The KHIKA Hardening Compliance Report internally uses a sqlite database (www.sqlite.org) to maintain the hardening templates and the sqlite database is available on the KHIKA Application Server at the following location:

  • For Windows Servers -> /opt/KHIKA/Apps/Dashboards_n_Reports/WIN_GRC/policy_db.dat
  • For Linux Servers -> /opt/KHIKA/Apps/Dashboards_n_Reports/Linux_GRC/linux_policy.db

Customization of Hardening policy may include anything from creating your own hardening policy template to editing an existing hardening policy. To know more, please read on:

To edit an existing hardening policy

The KHIKA Server Hardening mechanism internally uses an sqlite database to maintain the various hardening parameters and along with their expected values and in order to edit an existing hardening policy, you will need to update the sqlite database. This can be easily done by coping the appropriate policy database from the KHIKA Application server to the Windows Machine where SQLiteBrowser is available via WinSCP or any other equivalent utilities. Once the policy database sqlite file is copied to the windows server, open the policy database using SQLite Browser.

To create your own hardening policy template

Policy Database

NOTE

To edit the sqlite database, it is recommended to use an open source utility named 'Sqlite Browser' which may be downloaded from the https://sqlitebrowser.org/ (please review the license policy before downloading & using the sqlite browser utility).