Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael.boelen@cisofy.com>2019-07-10 21:22:38 +0300
committerMichael Boelen <michael.boelen@cisofy.com>2019-07-10 21:22:38 +0300
commit21f9a18e8b4bf8441e1fb9d07bba414f97013840 (patch)
tree8c9121be9d119b8a0c919217e6018efbc578941f
parentce263f8cd655c9ef252ec2aa909909539890cf29 (diff)
Updated log
-rw-r--r--CHANGELOG.md7
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 65dffde0..75a17f95 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ measures to further tighten any possible misuse.
- Security: additional safeguard by testing if common system tools are available
- Security: test parameters and arguments for presence of control characters
- Security: filtering out unexpected characters from profiles
+- Security: test if setuid bit is set on Lynis binary
- New function: DisplayWarning - show a warning on the screen
- New function: Equals - compare two strings
- New function: Readonly - mark variable read-only (security)
@@ -25,14 +26,20 @@ measures to further tighten any possible misuse.
- New profile option: disable-plugin - disables a single plugin
- New profile option: ssl-certificate-paths-to-ignore - ignore a path
- New test: CRYP-7930 - disk or file system encryption testing
+- New test: PROC-3802 - Check presence of prelink tooling
- New report key: openssh_daemon_running
+
### Changed
+- Function: CheckItem - returns only exit code (ITEM_FOUND value is dropped)
- Profiles: unused options removed
- Profiles: message is displayed when old format "key:value" is used
- Security: the 'nounset' (set -u) parameter is now activated by default
- Use only locations from PATH environment variable, unless it is not defined
- Show 'lynis generate hostids' when they are missing
+- PROC-3602 - allow different root directory
+- PROC-3612 - show 'Not found' instead of 'OK'
+- PROC-3614 - show 'Not found' instead of 'OK'
- SSH-7402 - detect other SSH daemons like dropbear
---------------------------------------------------------------------------------