Release history

2025

1. 2025v1.0.0

   First complete release. Completes the original 10-check roadmap with pending security update detection, AppArmor status checking, malware scanner presence detection, and an overall risk summary.

   • addedPending security update detection (apt-based) that flags security-tagged packages and offers to install them
   • addedAppArmor / mandatory access control status check with WSL-specific handling for known kernel enforcement limitations
   • addedMalware and rootkit scanner presence check for rkhunter and chkrootkit, with install option when neither is found
   • addedOverall risk summary that tallies warnings across every check into Excellent, Good, or Needs Attention
2. 2025v0.5.0

   Added sudo privilege audit and firewall status check with interactive port closing.

   • addedSudo privilege audit that lists sudo group members and flags NOPASSWD entries for accounts that can run admin commands without a password prompt
   • addedFirewall status check (ufw): detects installation and active status, offers to install or enable ufw, and lets users selectively close specific ports flagged earlier by the port-exposure check
3. 2025v0.4.1

   Improved user account audit with individual UID 0 review and interactive password assignment.

   • improvedUser account audit now lists unfamiliar UID 0 accounts individually for review
   • addedOffers interactive password assignment for any account with no password set
4. 2025v0.4.0

   Added user account audit for duplicate root-level accounts and empty passwords.

   • addedUser account audit that detects duplicate UID 0 (root-level) accounts and accounts with empty passwords
5. 2025v0.3.0

   Added SSH config file permission audit and home-directory world-writable file scanner.

   • addedSSH config file permission audit: verifies sshd_config ownership and group/other write access
   • addedWorld-writable file scanner that finds files any local user can modify, starting in the home directory
6. 2025v0.2.0

   Added SSH configuration audit with interactive fixes; fixed port exposure detection.

   • addedSSH configuration audit that checks PermitRootLogin, PasswordAuthentication, and PermitEmptyPasswords with interactive fix prompts
   • fixedFixed port exposure detection bugs
7. 2025v0.1.0

   Initial release: open port scanning and port exposure flagging.

   • addedOpen port scanning and port exposure detection for ports bound to 0.0.0.0 / [::]