Add hardering

securecheck/catalog.py

@@ -9,6 +9,7 @@ from .tasks import (
     log_rotation,
     lynis_audit,
     rootkit_check,
+    system_hardening,
     system_update,
     utilities_setup,
     zram_setup,
@@ -98,6 +99,14 @@ def task_catalog() -> list[TaskDefinition]:
             handler=lambda context: None,
             default_selected=False,
         ),
+        TaskDefinition(
+            key="system_hardening",
+            label="Durcissement système (hardening)",
+            description="Applique un durcissement complet : sysctl, SSH, PAM, modules noyau, permissions, AIDE, bannières, limites de sécurité.",
+            category="Sécurité",
+            handler=lambda context: None,
+            default_selected=False,
+        ),
     ]
 
     handlers = {
@@ -111,6 +120,7 @@ def task_catalog() -> list[TaskDefinition]:
         "zram_setup": zram_setup,
         "firewall_setup": firewall_setup,
         "docker_setup": docker_setup,
+        "system_hardening": system_hardening,
     }
     return [bind(task, handlers[task.key]) for task in base]