JShielder – Automated Hardening Script for Linux Servers

Ahhhh, yes.

We’re better off generating bash scripts as non-root that does nothing but install into a build subdirectory containing rootfs, along with file setting scripts upon root install.

Blindly poking into the rootfs is probably ok for script kiddies and hobbyists.