I've released a FreeBSD Hardening Script.

https://github.com/wravoc/harden-freebsd

This script will duplicate almost all the hardening settings run by /usr/libexec/bsdinstall/hardening and much more. Any directive can be set and re-set with a customizable settings.ini for administering, tuning your system, and locking down jails. I carefully selected a broad, cohesive group of hardening settings that together should provide a balanced risk/capability approach.

If there are better default settings or ones that you know cause a conflict with a particular piece of software please do share. I appreciate any feedback on what I should have done better given this limited scope of this Python learning project for me.

Thanks!