Homework
Take your hardening skills into your own environment: build a checklist, audit a personal system, and write a pre-deploy gate.
Task 1 — Personal Hardening Checklist
Objective: Build a one-page hardening checklist for your own laptop or server.
Instructions:
- 10 items covering auth, updates, firewall, logging, browser, backups
- Each item with a verification command
- A rollback note per item
Deliverable: A markdown checklist you can print and tape to your monitor.
Task 2 — Dockerfile Lint
Objective: Write a short AI-driven Dockerfile linter prompt.
Instructions:
- Input: any Dockerfile
- Output: findings list + rewritten multi-stage Dockerfile
- Include a 'severity' field per finding
- Test on the lab's
dockerfile-insecure.txt
Deliverable: Prompt file and a linted output.
Task 3 — CIS Gap Analysis
Objective: Pick one service in your environment (ssh, postgres, nginx, etc.) and produce a real CIS gap analysis.
Instructions:
- Show the current config, the target CIS control numbers, and fixed config
- Identify any finding you cannot fix and explain why
Deliverable: A markdown report titled cis-<service>-gap.md.