These include all the harden packages listed in the Debian automatic hardening documentation (https://www.debian.org/doc/manuals/securing-debian-howto/ch-automatic-harden.en.html), including:

  • harden
  • harden-tools
  • harden-servers
  • harden-clients
  • etc., etc.

Confusingly, it appears that the suite's documentation package will be available for Debian Stretch (9.0), but none of the harden meta-packages are currently slated for that release either.

What gives? Are there alternative replacement packages that I overlooked? If so, what are they?

It may be worth noting that I spent a great deal of time searching for the answer to this question online. There seems to be no information on this topic, and I've found nothing in the mailing lists, though I haven't search as thoroughly there.

All I have found is that the packages must have been available for Jessie at some point, but were later removed, as some Google queries still return dead links to Jessie package information pages.

The harden packages were a novice administrator's godsend, though I understand they were never the complete answer to securing a Debian server. Still, it is odd not seeing any explanation for their exclusion in Debian's newest releases.


So looking through the bugs for harden I found the following two bugs.

So the answer seems to be that the maintainer didn't think it was useful or functional anymore.

I have never used the package, so I can't provide much beyond linking you to the correct bug reports.

  • Wow, interesting. I guess I never thought to search the bug reports. Still, I wonder why it was considered best to remove the package altogether rather than update it. Removing it certainly makes rudimentary hardening harder (no pun intended) for novice admins. Is there a list which indicates what packages each of the harden members conflicted with? packages.debian.org doesn't detail package conflicts. Thanks for the answer! – user339676 Jul 2 '15 at 19:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.