diff options
author | Michael Boelen <michael.boelen@cisofy.com> | 2016-07-24 16:53:37 +0300 |
---|---|---|
committer | Michael Boelen <michael.boelen@cisofy.com> | 2016-07-24 16:53:37 +0300 |
commit | 6e7aa9a6c382e25ff2418568c274dd7b226efc27 (patch) | |
tree | 9a48e71232c665584e30f042a7bf6095d92827c7 | |
parent | ee9d7963e7e9b9ff925d2e199016a32401cdce0c (diff) |
Uniform formatting between releases
-rw-r--r-- | CHANGELOG.md | 515 |
1 files changed, 257 insertions, 258 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 99e6a3ec..3c83ef1b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -41,7 +41,7 @@ Several controls on the website are added or updated, including: * PHP-2374 * PROC-3612 --------------------------------------------------------------------------------- +--------------------------------------------------------------------------------- Lynis 2.3.1 (2016-07-14) @@ -326,7 +326,7 @@ Plugins -------------------------------------------------------------- -= Lynis 2.2.0 (2016-03-18) = +Lynis 2.2.0 (2016-03-18) We are proud to present this new release of Lynis. It is a major upgrade, and the result of many months of work. This version includes new features and tests, and @@ -578,256 +578,255 @@ permissions for Docker files, like the socket file [CONT-8108]. -------------------------------------------------------------- - = Lynis 2.1.1 (2015-07-22) = - - This release adds a lot of improvements, with focus on performance, and - additional support for common Linux distributions and external utilities. - We recommend to use this latest version. - - * Operating system enhancements - ------------------------------- - Support for systems like CentOS, openSUSE, Slackware is improved. - - * Performance - ------------- - Performance tuning has been applied, to speed up execution of the audit on - systems with many files. This also includes code cleanups. - - * Automatic updates - ------------------- - Initial work on an automatic updater has been implemented. This way Lynis - can be scheduled for automatic updating from a trusted source. - - * Internal functions - -------------------- - Not all systems have readlink, or the -f option of readlink. The - ShowSymlinkPath function has been extended with a Python based check, which - is often available. - - * Software support - ------------------ - Apache module directory /usr/lib64/apache has been added, which is used on - openSUSE. +Lynis 2.1.1 (2015-07-22) - Support for Chef has been added. +This release adds a lot of improvements, with focus on performance, and +additional support for common Linux distributions and external utilities. +We recommend to use this latest version. - Added tests for CSF's lfd utility for integrity monitoring on directories and - files. Related tests are FINT-4334 and FINT-4336. +* Operating system enhancements +------------------------------- +Support for systems like CentOS, openSUSE, Slackware is improved. - Added support for Chrony time daemon and timesync daemon. Additionally NTP - sychronization status is checked when it is enabled. +* Performance +------------- +Performance tuning has been applied, to speed up execution of the audit on +systems with many files. This also includes code cleanups. - Improved single user mode protection on the rescue.service file. +* Automatic updates +------------------- +Initial work on an automatic updater has been implemented. This way Lynis +can be scheduled for automatic updating from a trusted source. - * Other - ------- - Check for user permissions has been extended. - Python binary is now detected, to help with symlink detection. - Several new legal terms have been added, which are used for usage in banners. - In several files old tests have been removed, to further clean up the code. +* Internal functions +-------------------- +Not all systems have readlink, or the -f option of readlink. The +ShowSymlinkPath function has been extended with a Python based check, which +is often available. - * Bug fixes - --------- - Nginx test showed error when access_log had multiple parameters. - Tests using locate won't be performed if not present. - Fix false positive match on Squid unsafe ports [SQD-3624]. - The hardening index is now also inserted into the report if it is not displayed - on screen. +* Software support +------------------ +Apache module directory /usr/lib64/apache has been added, which is used on +openSUSE. - * Functions - --------- - Added AddSystemGroup function +Support for Chef has been added. - * New tests - --------- - Several new tests have been added: +Added tests for CSF's lfd utility for integrity monitoring on directories and +files. Related tests are FINT-4334 and FINT-4336. - [PKGS-7366] Scan for debsecan utility on Debian systems - [PKGS-7410] Determine amount of installed kernel packages - [TIME-3106] Check synchronization status of NTP on systemd based systems - [CONT-8102] Docker daemon status and gather basic details - [CONT-8104] Check docker info for any Docker warnings - [CONT-8106] Check total, running and unused Docker containers +Added support for Chrony time daemon and timesync daemon. Additionally NTP +sychronization status is checked when it is enabled. - * Plugins - --------- - [PLGN-2602] Disabled by default, as it may be too slow for some machines - [PLGN-3002] Extended with /sbin/nologin +Improved single user mode protection on the rescue.service file. - * Documentation - --------------- - A new document has been created to help with the process of upgrading Lynis. - It is available at https://cisofy.com/documentation/lynis/upgrading/ +* Other +------- +Check for user permissions has been extended. +Python binary is now detected, to help with symlink detection. +Several new legal terms have been added, which are used for usage in banners. +In several files old tests have been removed, to further clean up the code. - -------------------------------------------------------------- +* Bug fixes +--------- +Nginx test showed error when access_log had multiple parameters. +Tests using locate won't be performed if not present. +Fix false positive match on Squid unsafe ports [SQD-3624]. +The hardening index is now also inserted into the report if it is not displayed +on screen. +* Functions +--------- +Added AddSystemGroup function - = Lynis 2.1.0 (2015-04-16) = +* New tests +--------- +Several new tests have been added: +* [PKGS-7366] Scan for debsecan utility on Debian systems +* [PKGS-7410] Determine amount of installed kernel packages +* [TIME-3106] Check synchronization status of NTP on systemd based systems +* [CONT-8102] Docker daemon status and gather basic details +* [CONT-8104] Check docker info for any Docker warnings +* [CONT-8106] Check total, running and unused Docker containers - * General - --------- - Screen output has been improved to provide additional information. +* Plugins +--------- +* [PLGN-2602] Disabled by default, as it may be too slow for some machines +* [PLGN-3002] Extended with /sbin/nologin - * OS support - ------------ - CUPS detection on Mac OS has been improved. AIX systems will now use csum - utility to create host ID. Group check have been altered on AIX, to include - the -n ALL. Core dump check on Linux is extended to check for actual values - as well. +* Documentation +--------------- +A new document has been created to help with the process of upgrading Lynis. +It is available at https://cisofy.com/documentation/lynis/upgrading/ - * Software - ---------- - McAfee detection has been extended by detecting a running cma binary. - Improved detection of pf firewall on BSD and Mac OS. Security patch checking - with zypper extended. +-------------------------------------------------------------- - * Session timeout - ----------------- - Tests to determine shell time out setting have been extended to account for - AIX, HP-UX and other platforms. It will now determine also if variable is - exported as a readonly variable. Related compliance section PCI DSS 8.1.8 - has been extended. - * Documentation - --------------- - - New document: Getting started with Lynis - https://cisofy.com/documentation/lynis/get-started/ +Lynis 2.1.0 (2015-04-16) - * Plugins (Enterprise) - ---------------------- - - Update to file integrity plugin - Changes to PLGN-2606 (capabilities check) +* General +--------- +Screen output has been improved to provide additional information. - - New configuration plugins: - PLGN-4802 (SSH settings) - PLGN-4804 (login.defs) +* OS support +------------ +CUPS detection on Mac OS has been improved. AIX systems will now use csum +utility to create host ID. Group check have been altered on AIX, to include +the -n ALL. Core dump check on Linux is extended to check for actual values +as well. - Download link: https://cisofy.com/download/lynis/ +* Software +---------- +McAfee detection has been extended by detecting a running cma binary. +Improved detection of pf firewall on BSD and Mac OS. Security patch checking +with zypper extended. + +* Session timeout +----------------- +Tests to determine shell time out setting have been extended to account for +AIX, HP-UX and other platforms. It will now determine also if variable is +exported as a readonly variable. Related compliance section PCI DSS 8.1.8 +has been extended. + +* Documentation +--------------- +- New document: Getting started with Lynis + https://cisofy.com/documentation/lynis/get-started/ - -------------------------------------------------------------- +* Plugins (Enterprise) +---------------------- +- Update to file integrity plugin + Changes to PLGN-2606 (capabilities check) +New configuration plugins: +* PLGN-4802 (SSH settings) +* PLGN-4804 (login.defs) - = Lynis 2.0.0 (2015-02-25) = +Download link: https://cisofy.com/download/lynis/ +-------------------------------------------------------------- - The first release within the 2.x branch! It includes several new features, to - simplify or improve auditing on Unix based systems, including BSD, Linux, - Mac OS and more traditional systems like AIX, HPUX and Solaris. - New features and many improvements are the reason for the bump to a major - release, also a beginning of a new era. Many tools to audit or harden systems - have being released, yet none have been maintained over a long period of time. +Lynis 2.0.0 (2015-02-25) -Lynis Support and Feedback - This software is supported and under development by CISOfy. By providing a - dual license, this software is kept up-to-date and enhanced. Both customers - and the community, benefit from this licensing. This release is available - thanks to your input and feedback. +The first release within the 2.x branch! It includes several new features, to +simplify or improve auditing on Unix based systems, including BSD, Linux, +Mac OS and more traditional systems like AIX, HPUX and Solaris. -Lynis Helpers +New features and many improvements are the reason for the bump to a major +release, also a beginning of a new era. Many tools to audit or harden systems +have being released, yet none have been maintained over a long period of time. - New in this release is the support for helpers. Small utilities which enhance - Lynis by providing a single goal. The first helper available is to audit - Docker build files. +Lynis Support and Feedback +-------------------------- +This software is supported and under development by CISOfy. By providing a +dual license, this software is kept up-to-date and enhanced. Both customers +and the community, benefit from this licensing. This release is available +thanks to your input and feedback. -Lynis Improved OS support +Lynis Helpers +------------- +New in this release is the support for helpers. Small utilities which enhance +Lynis by providing a single goal. The first helper available is to audit +Docker build files. - Many changes have been implemented to better support Linux, FreeBSD, NetBSD - DragonBSD and OpenBSD in particular. Upcoming releases will include smaller - "improvement rounds" for other systems as well. +Lynis Improved OS support +------------------------- +Many changes have been implemented to better support Linux, FreeBSD, NetBSD +DragonBSD and OpenBSD in particular. Upcoming releases will include smaller +"improvement rounds" for other systems as well. Lynis New technologies - - More utilities and technologies are supported now. Technologies and tools - like systemd, Docker, nftables. +---------------------- +More utilities and technologies are supported now. Technologies and tools +like systemd, Docker, nftables. Lynis Lynis Enterprise - - As this code is shared, customers have an additional option to define to - what server they want to upload the audit results. Also, commercial plugins - have been bundled. +---------------------- +As this code is shared, customers have an additional option to define to +what server they want to upload the audit results. Also, commercial plugins +have been bundled. Lynis New parameters - - Several new options have been added: - --dump-options (see all options) - --report-file (define a different location for the report file) +-------------------- +Several new options have been added: +* --dump-options (see all options) +* --report-file (define a different location for the report file) Lynis General +------------- +Documentation on the website has been extended: https://cisofy.com/support/ +The man page, Lynis binary and several tests have improved texts. - Documentation on the website has been extended: https://cisofy.com/support/ - The man page, Lynis binary and several tests have improved texts. - - This release is exceptional in that it includes many changes. We have done - a lot of testing on different platforms. You could expect this software to be - stable. Still, an assumption is no guarantee and especially no substitution - for testing in your own environment. If you encounter issues, please report - them via one of the links above in this changelog. +This release is exceptional in that it includes many changes. We have done +a lot of testing on different platforms. You could expect this software to be +stable. Still, an assumption is no guarantee and especially no substitution +for testing in your own environment. If you encounter issues, please report +them via one of the links above in this changelog. - Enjoy this new release! +Enjoy this new release! ================================================================================ Lynis 1.6.4 (2014-11-04) - New: - - Boot loader detection for AIX [BOOT-5102] - - Detection of getcap and lsvg binary - - Added filesystem_ext to report - - Detect rootsh +New: +- Boot loader detection for AIX [BOOT-5102] +- Detection of getcap and lsvg binary +- Added filesystem_ext to report +- Detect rootsh - Changes: - - Hide errors when RPM database is faulty and show suggestion instead [PKGS-7308] - - Allow OpenBSD to gather information on listening network ports [NETW-3012] - - Don't trigger warning for Shellshock when doing segfault test [SHLL-6290] - - Do not run Apache test on OpenBSD and strip control chars [HTTP-6624] - - Extended AIDE test with configuration validation test [FIND-4314] - - Improved Shellshock test regarding non-Linux support [SHLL-6290] - - Added support for gathering volume groups on AIX [FILE-6311] - - Properly parse PAM lines and add them to report [AUTH-9264] - - Support for boot loader detection on OpenBSD [BOOT-5159] - - Added uptime detection for OpenBSD systems [BOOT-5202] - - Support for volume groups on AIX [FILE-6312] - - Redirect errors when searching for readlink binary - - -- +Changes: +- Hide errors when RPM database is faulty and show suggestion instead [PKGS-7308] +- Allow OpenBSD to gather information on listening network ports [NETW-3012] +- Don't trigger warning for Shellshock when doing segfault test [SHLL-6290] +- Do not run Apache test on OpenBSD and strip control chars [HTTP-6624] +- Extended AIDE test with configuration validation test [FIND-4314] +- Improved Shellshock test regarding non-Linux support [SHLL-6290] +- Added support for gathering volume groups on AIX [FILE-6311] +- Properly parse PAM lines and add them to report [AUTH-9264] +- Support for boot loader detection on OpenBSD [BOOT-5159] +- Added uptime detection for OpenBSD systems [BOOT-5202] +- Support for volume groups on AIX [FILE-6312] +- Redirect errors when searching for readlink binary + +--------------------------------------------------------------------------------- Lynis 1.6.3 (2014-10-14) - New: - - Added tests for Shellshock bash vulnerability [SHLL-6290] - - Added test to determine if Snoopy is used [ACCT-9636] - - New test for qdaemon configuration file [PRNT-2416] - - Test for GRUB boot loader password [BOOT-5122] - - New test for qdaemon printer jobs [PRNT-2420] - - Added ClamXav test for Mac OS X [MALW-3288] - - Gentoo vulnerable packages test [PKGS-7393] - - New test for qdaemon status [PRNT-2418] - - Gentoo package listing [PKGS-7304] - - Running Lynis without root permissions will start non-privileged scan - - Systemd service and timer example file added - - Added grub2-install to binaries +New: +- Added tests for Shellshock bash vulnerability [SHLL-6290] +- Added test to determine if Snoopy is used [ACCT-9636] +- New test for qdaemon configuration file [PRNT-2416] +- Test for GRUB boot loader password [BOOT-5122] +- New test for qdaemon printer jobs [PRNT-2420] +- Added ClamXav test for Mac OS X [MALW-3288] +- Gentoo vulnerable packages test [PKGS-7393] +- New test for qdaemon status [PRNT-2418] +- Gentoo package listing [PKGS-7304] +- Running Lynis without root permissions will start non-privileged scan +- Systemd service and timer example file added +- Added grub2-install to binaries - Changes: - - Adjustments so insecure SSL protocols are detected in nginx config [HTTP-6710] - - Directories will be skipped when searching for nginx log files [HTTP-6720] - - Only gather unique name servers from /etc/resolv.conf [NAME-2704] - - Properly detect mod_evasive on Gentoo and others [HTTP-6640] - - Improved swap partition detection in /etc/fstab [FILE-6336] - - Improvements to kernel detection (e.g. Gentoo) [KRNL-5830] - - Test for built-in security options in YUM [PKGS-7386] - - Improved boot loader detection for GRUB2 [BOOT-5121] - - Split GRUB test into two tests [BOOT-5122] - - Added Mac OS uptime check [BOOT-5202] - - Improved GetHostID function for systems having only ip binary - - Improved testing for symlinked binary directories - - Minor adjustments to log output - - Renamed dev directory to extras - - -- +Changes: +- Adjustments so insecure SSL protocols are detected in nginx config [HTTP-6710] +- Directories will be skipped when searching for nginx log files [HTTP-6720] +- Only gather unique name servers from /etc/resolv.conf [NAME-2704] +- Properly detect mod_evasive on Gentoo and others [HTTP-6640] +- Improved swap partition detection in /etc/fstab [FILE-6336] +- Improvements to kernel detection (e.g. Gentoo) [KRNL-5830] +- Test for built-in security options in YUM [PKGS-7386] +- Improved boot loader detection for GRUB2 [BOOT-5121] +- Split GRUB test into two tests [BOOT-5122] +- Added Mac OS uptime check [BOOT-5202] +- Improved GetHostID function for systems having only ip binary +- Improved testing for symlinked binary directories +- Minor adjustments to log output +- Renamed dev directory to extras + +--------------------------------------------------------------------------------- Lynis 1.6.2 (2014-09-22) @@ -864,7 +863,7 @@ Lynis 1.6.2 (2014-09-22) - Removed individual warnings [BOOT-5184] - Several improvements for Arch Linux - -- +--------------------------------------------------------------------------------- Lynis 1.6.1 (2014-09-09) @@ -886,7 +885,7 @@ Lynis 1.6.1 (2014-09-09) - Several tests will have root-only bit set now - Improved netstat tests on Arch Linux - -- +--------------------------------------------------------------------------------- Lynis 1.6.0 (2014-08-27) @@ -901,7 +900,7 @@ Lynis 1.6.0 (2014-08-27) - Set default values for update check, to avoid error message on screen - Cleanup for mail section, adding IMAP and POP3 protocols - -- +--------------------------------------------------------------------------------- Lynis 1.5.9 (2014-07-31) @@ -942,7 +941,7 @@ Lynis 1.5.9 (2014-07-31) - Added printing_daemon and mail_daemon to report - Binaries extended with tools like kstat, puppet - -- +--------------------------------------------------------------------------------- Lynis 1.5.8 (2014-07-24) @@ -958,7 +957,7 @@ Lynis 1.5.8 (2014-07-24) - Squid configuration file permissions test adjusted and control added to website [SQD-3613] - Logging has been extended and exceptional event text adjusted - -- +--------------------------------------------------------------------------------- Lynis 1.5.7 (2014-07-09) @@ -969,7 +968,7 @@ Lynis 1.5.7 (2014-07-09) Changes: - Fix for error_log handling in nginx - -- +--------------------------------------------------------------------------------- Lynis 1.5.6 (2014-06-12) @@ -987,7 +986,7 @@ Lynis 1.5.6 (2014-06-12) - New report value for plugins: plugins_enabled - Fixed test to determine active TCP sessions on Linux [NETW-3012] - -- +--------------------------------------------------------------------------------- Lynis 1.5.5 (2014-06-08) @@ -1009,7 +1008,7 @@ Lynis 1.5.5 (2014-06-08) to this version as soon as possible. For more information see the our blog post: http://linux-audit.com/lynis-security-notice-154-and-older/ - -- +--------------------------------------------------------------------------------- Lynis 1.5.4 (2014-06-04) @@ -1022,7 +1021,7 @@ Lynis 1.5.4 (2014-06-04) - Altered SMBD version check for Mac OS - Small adjustments to report for readability - -- +--------------------------------------------------------------------------------- Lynis 1.5.3 (2014-05-19) @@ -1037,7 +1036,7 @@ Lynis 1.5.3 (2014-05-19) - Adjusted check kernel test for non-Linux systems [KRNL-5730] - Improved screen output on AIX systems with echo command - -- +--------------------------------------------------------------------------------- Lynis 1.5.2 (2014-05-05) @@ -1056,7 +1055,7 @@ Lynis 1.5.2 (2014-05-05) - Removed warning from NTP falsetickers test, added data to report [TIME-3132] - Removed warning from NTP selected time source test [TIME-3124] - -- +--------------------------------------------------------------------------------- Lynis 1.5.1 (2014-04-22) @@ -1067,7 +1066,7 @@ Lynis 1.5.1 (2014-04-22) - Redirect rpcinfo errors to /dev/null - Adjusted color scheme - -- +--------------------------------------------------------------------------------- Lynis 1.5.0 (2014-04-10) @@ -1082,7 +1081,7 @@ Lynis 1.5.0 (2014-04-10) - Extended detection for Oracle Linux - Updated the FAQ and README files - -- +--------------------------------------------------------------------------------- Lynis 1.4.9 (2014-04-03) @@ -1094,7 +1093,7 @@ Lynis 1.4.9 (2014-04-03) - Check for non-unique accounts on several platforms [AUTH-9208] - Set initial discover value for PAM modules to zero [AUTH-9268] - -- +--------------------------------------------------------------------------------- Lynis 1.4.8 (2014-03-27) @@ -1106,7 +1105,7 @@ Lynis 1.4.8 (2014-03-27) - Extend LILO password test [BOOT-5139] - Set default value for pf firewall - -- +--------------------------------------------------------------------------------- Lynis 1.4.7 (2014-03-21) @@ -1121,7 +1120,7 @@ Lynis 1.4.7 (2014-03-21) - Clean-up of unneeded plugin section - Small typo fix - -- +--------------------------------------------------------------------------------- Lynis 1.4.6 (2014-03-14) @@ -1132,7 +1131,7 @@ Lynis 1.4.6 (2014-03-14) Changes: - Screen cleanup - -- +--------------------------------------------------------------------------------- Lynis 1.4.5 (2014-03-08) @@ -1151,7 +1150,7 @@ Lynis 1.4.5 (2014-03-08) - Improved color scheme - Extended logging - -- +--------------------------------------------------------------------------------- Lynis 1.4.4 (2014-03-03) @@ -1174,7 +1173,7 @@ Lynis 1.4.4 (2014-03-03) - Improved IsRunning() function - Extended color scheme - -- +--------------------------------------------------------------------------------- Lynis 1.4.3 (2014-02-23) @@ -1191,7 +1190,7 @@ Lynis 1.4.3 (2014-02-23) - Inserted sleep time when update is found - Extended report output - -- +--------------------------------------------------------------------------------- Lynis 1.4.2 (2014-02-19) @@ -1200,7 +1199,7 @@ Lynis 1.4.2 (2014-02-19) - Extended umask tests with pam_umask entries [AUTH-9328] - Check for supressed version on Squid [SQD-3680] - -- +--------------------------------------------------------------------------------- Lynis 1.4.1 (2014-02-15) @@ -1217,7 +1216,7 @@ Lynis 1.4.1 (2014-02-15) - Small adjustments for upcoming plugin support - Extended man page - -- +--------------------------------------------------------------------------------- Lynis 1.4.0 (2014-01-29) @@ -1233,7 +1232,7 @@ Lynis 1.4.0 (2014-01-29) - Ignore LANG global setting - Improved logging - -- +--------------------------------------------------------------------------------- Lynis 1.3.9 (2014-01-09) @@ -1247,7 +1246,7 @@ Lynis 1.3.9 (2014-01-09) - Extended vulnerable packages test [PKGS-7392] - Hide possible sysctl errors [KRNL-5820] - -- +--------------------------------------------------------------------------------- Lynis 1.3.8 (2013-12-25) @@ -1282,7 +1281,7 @@ Lynis 1.3.8 (2013-12-25) - Extended binaries with showmount and yum - Updated man page - -- +--------------------------------------------------------------------------------- Lynis 1.3.7 (2013-12-10) @@ -1294,7 +1293,7 @@ Lynis 1.3.7 (2013-12-10) - Improved check for iptables binary check - Extended report with the tests executed and skipped - -- +--------------------------------------------------------------------------------- Lynis 1.3.6 (2013-12-03) @@ -1350,7 +1349,7 @@ Lynis 1.3.6 (2013-12-03) - Report about log rotation tool and status - Updated man page - -- +--------------------------------------------------------------------------------- Lynis 1.3.5 (2013-11-19) @@ -1383,7 +1382,7 @@ Lynis 1.3.5 (2013-11-19) - Extended update check functions and output - Cleaned up reporting and extended it with exceptions - -- +--------------------------------------------------------------------------------- Lynis 1.3.4 (2013-11-08) @@ -1400,7 +1399,7 @@ Lynis 1.3.4 (2013-11-08) - Extended testing for PHP files in other directories [PHP-2211] - Improved screen output for several tests and extended logging - -- +--------------------------------------------------------------------------------- Lynis 1.3.3 (2013-10-24) @@ -1412,7 +1411,7 @@ Lynis 1.3.3 (2013-10-24) - Extended checks for presence NTP client or daemon [TIME-3104] - Extended logging - -- +--------------------------------------------------------------------------------- Lynis 1.3.2 (2013-10-09) @@ -1430,7 +1429,7 @@ Lynis 1.3.2 (2013-10-09) - Corrected listing of purgable packages [PKGS-7346] - Adjusted yum-plugin-security check due to package changes [PKGS-7386] - -- +--------------------------------------------------------------------------------- Lynis 1.3.1 (2013-10-02) @@ -1444,7 +1443,7 @@ Lynis 1.3.1 (2013-10-02) - Adjusted variable checking for Solaris [HOME-9310] - Adjusted search in modprobe directory [STRG-1840] [STRG-1846] - -- +--------------------------------------------------------------------------------- Lynis 1.3.0 (2011-12-25) @@ -1469,7 +1468,7 @@ Lynis 1.3.0 (2011-12-25) - Improved binary check for compilers - Added configuration option in scan profile (show_tool_tips, default true) - -- +--------------------------------------------------------------------------------- Lynis 1.2.9 (2009-12-15) @@ -1489,7 +1488,7 @@ Lynis 1.2.9 (2009-12-15) - Corrected /etc/security/limits.conf path in test [KRNL-5820] - Updated man page, limited lines to 80 chars - -- +--------------------------------------------------------------------------------- Lynis 1.2.8 (2009-12-08) @@ -1526,7 +1525,7 @@ Lynis 1.2.8 (2009-12-08) - Changed syslog daemon detection and state - Extended report file - -- +--------------------------------------------------------------------------------- Lynis 1.2.7 (2009-11-01) @@ -1583,7 +1582,7 @@ Lynis 1.2.7 (2009-11-01) - Fixed CUPS daemon test [PRNT-2304] - Also check for uppercase chars in issue file [BANN-7126] - -- +--------------------------------------------------------------------------------- Lynis 1.2.6 (2009-04-05) @@ -1611,7 +1610,7 @@ Lynis 1.2.6 (2009-04-05) - Corrected Syslog-NG status [LOGG-2132] - Moved TODO to dev directory - -- +--------------------------------------------------------------------------------- Lynis 1.2.5 (2009-03-27) @@ -1684,7 +1683,7 @@ Lynis 1.2.5 (2009-03-27) - Adjusted hardening points of several tests - Log and display improvements for several tests - -- +--------------------------------------------------------------------------------- Lynis 1.2.4 (2009-03-17) @@ -1745,7 +1744,7 @@ Lynis 1.2.4 (2009-03-17) - Changed text if everything is ok (no warnings) - Log improvements - -- +--------------------------------------------------------------------------------- Lynis 1.2.3 (2009-03-02) @@ -1792,7 +1791,7 @@ Lynis 1.2.3 (2009-03-02) - Correct display of files with spaces [FILE-6354] - Changed several tests so they work correctly with Solaris - -- +--------------------------------------------------------------------------------- Lynis 1.2.2 (2009-02-15) @@ -1820,7 +1819,7 @@ Lynis 1.2.2 (2009-02-15) - Custom profiles should be compared to the default profile, due small changes in the structure. - -- +--------------------------------------------------------------------------------- Lynis 1.2.1 (2008-09-05) @@ -1850,7 +1849,7 @@ Lynis 1.2.1 (2008-09-05) - Improved portsclean test (FreeBSD) [PKGS-7348] - Added --quiet and --tests options to help and man page - -- +--------------------------------------------------------------------------------- Lynis 1.2.0 (2008-08-26) @@ -1875,7 +1874,7 @@ Lynis 1.2.0 (2008-08-26) - Added file available check when using --view-manpage - Most program variables are initialized now for future additions - -- +--------------------------------------------------------------------------------- Lynis 1.1.9 (2008-08-09) @@ -1904,7 +1903,7 @@ Lynis 1.1.9 (2008-08-09) - Renamed tests_auditing to tests_mac_frameworks - Several tests improved with extended logging - -- +--------------------------------------------------------------------------------- Lynis 1.1.8 (2008-07-16) @@ -1929,7 +1928,7 @@ Lynis 1.1.8 (2008-07-16) - Improved LDAP test so it skips correctly on Mac OS AUTH-9238] - Bugfix: MySQL status check gave incorrect output [DBS-1804] - -- +--------------------------------------------------------------------------------- Lynis 1.1.7 (2008-06-28) @@ -1961,7 +1960,7 @@ Lynis 1.1.7 (2008-06-28) - Improved syslog-ng detection - Adjusted README with link to online (extended) documentation - -- +--------------------------------------------------------------------------------- Lynis 1.1.6 (2008-06-19) @@ -2003,7 +2002,7 @@ Lynis 1.1.6 (2008-06-19) - Assigned ID to FreeBSD promiscuous port test [NETW-3014] - Assigned ID to file permissions check [FILE-7524] - -- +--------------------------------------------------------------------------------- Lynis 1.1.5 (2008-06-10) @@ -2031,7 +2030,7 @@ Lynis 1.1.5 (2008-06-10) - Fixed yellow color when being used at text display - Several logging improvements and cleanups - -- +--------------------------------------------------------------------------------- Lynis 1.1.4 (2008-05-31) @@ -2052,7 +2051,7 @@ Lynis 1.1.4 (2008-05-31) - Debian/Ubuntu file tests improved - Extended man page - -- +--------------------------------------------------------------------------------- Lynis 1.1.3 (2008-05-21) @@ -2080,7 +2079,7 @@ Lynis 1.1.3 (2008-05-21) - Changed Debian/Ubuntu kernel update test, so it won't be tested on others - Exim test failed, due to using an incorrect variable name - -- +--------------------------------------------------------------------------------- Lynis 1.1.2 (2008-05-11) @@ -2106,7 +2105,7 @@ Lynis 1.1.2 (2008-05-11) before setting default.prf (in current work directory) as profile to use. - New directory added to be installed for future versions: plugins - -- +--------------------------------------------------------------------------------- Lynis 1.1.1 (2008-04-13) @@ -2130,7 +2129,7 @@ Lynis 1.1.1 (2008-04-13) - Fixed sticky bit checking on /tmp, so it won't give incorrect results on SuSE/Debian systems - -- +--------------------------------------------------------------------------------- Lynis 1.1.0 (2008-04-09) @@ -2145,7 +2144,7 @@ Lynis 1.1.0 (2008-04-09) - Changed display of operating system version (Linux) - Fixed PHP check - -- +--------------------------------------------------------------------------------- Lynis 1.0.9 (2008-03-24) @@ -2161,7 +2160,7 @@ Lynis 1.0.9 (2008-03-24) - Fixed option in main help window for --man option - Code improvement, splitting up sections to seperated files - -- +--------------------------------------------------------------------------------- Lynis 1.0.8 (2008-02-10) @@ -2181,7 +2180,7 @@ Lynis 1.0.8 (2008-02-10) - Changed indentation for many tests - Changed some typos in notice/warning messages - -- +--------------------------------------------------------------------------------- Lynis 1.0.7 (2008-01-28) @@ -2223,7 +2222,7 @@ Lynis 1.0.7 (2008-01-28) - Created file tests_ports_packages for Ports and Packages - Deleted lynis.spec file, since it was not working and will be rewritten later - -- +--------------------------------------------------------------------------------- Lynis 1.0.6 (2007-12-26) @@ -2238,7 +2237,7 @@ Lynis 1.0.6 (2007-12-26) - Added sorting to rpm/dpkg listings - FAQ extended - -- +--------------------------------------------------------------------------------- Lynis 1.0.5 (2007-12-02) @@ -2271,7 +2270,7 @@ Lynis 1.0.5 (2007-12-02) - Moved OS detection to file (include/osdetection) - Added NEVERBREAK to avoid user input (cronjob support) - -- +--------------------------------------------------------------------------------- Lynis 1.0.4 (2007-11-27) @@ -2288,7 +2287,7 @@ Lynis 1.0.4 (2007-11-27) - Logging extended and improved - Screen output slightly changed - -- +--------------------------------------------------------------------------------- Lynis 1.0.3 (2007-11-19) @@ -2310,7 +2309,7 @@ Lynis 1.0.3 (2007-11-19) - [Bugfix] Fixed sticky bit test at Debian - Extended documentation and changelog file - -- +--------------------------------------------------------------------------------- Lynis 1.0.2 (2007-11-15) @@ -2328,7 +2327,7 @@ Lynis 1.0.2 (2007-11-15) - Added version numbers to logfile for used binaries/tools - Updated list of parameters within Lynis help - -- +--------------------------------------------------------------------------------- Lynis 1.0.1 (2007-11-12) @@ -2349,7 +2348,7 @@ Lynis 1.0.1 (2007-11-12) - [bug] Changed skel directory check - Fixed display Apache configuration file - -- +--------------------------------------------------------------------------------- Lynis 1.0.0 (2007-11-08) |