Ubuntu Security Best Practices

ubuntu_benchmark_script.py

#!/usr/bin/env python3
"""
Python script that implements Ubuntu 16.04 best practices as specified by the
CIS Benchmark. Directly edits system files - use with caution haha.

Uses code from the CIS Ubuntu Linux Benchmark (v.1.10)
https://learn.cisecurity.org/benchmarks
"""
from subprocess import call as c

# Functions
def make_change(desc, cmd):
    if not isinstance(cmd, list):
        cmd = cmd.split(' ')

    print("{}...".format(desc), end="", flush=True)
    if c(cmd) == 0:
        print("[SUCCESS]")
    else:
        print("[FAIL]")

# Disable non-crucial services
make_change("Disable printing", "systemctl disable cups")
make_change("Disable DHCP server", "systemctl disable isc-dhcp-server")
make_change("Disable DHCPv6 server", "systemctl disable isc-dhcp-server6")
make_change("Disable LDAP server", "systemctl disable slapd")
make_change("Disable DNS server", "systemctl disable bind9")