Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Boelen <michael.boelen@cisofy.com>2016-05-12 07:24:45 +0300
committerMichael Boelen <michael.boelen@cisofy.com>2016-05-12 07:24:45 +0300
commit321bd5abc1e1ec675cbf73133ccfef60f0025695 (patch)
treeeba01994d52ebc4944537baa96d825896ce1ecfb /CHANGELOG
parent9ba99711d602188f463e92e60dba7c27b7c0534f (diff)
Updated log
Diffstat (limited to 'CHANGELOG')
-rw-r--r--CHANGELOG22
1 files changed, 19 insertions, 3 deletions
diff --git a/CHANGELOG b/CHANGELOG
index 6750ba1d..ef36578f 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -43,12 +43,14 @@ new custom.prf.
* Ansible
-------
-Ansible examples on https://github.com/CISOfy/lynis-ansible
+Ansible examples for deployment are now on https://github.com/CISOfy/lynis-ansible
+
* Databases
-----------
Lynis will check also for DB2 instances and report the status.
+
* Developer Mode
----------------
With this release the developer mode is introduced. It can be activated with the
@@ -72,10 +74,19 @@ This helper will show help, or values (e.g. version, plugin directories, etc).
Some examples include: lynis show options, lynis show commands, lynis show
version, etc. See lynis show for all available details.
+
+* File Systems
+--------------
+The XFS file system detection has been added. Mount points /dev/shm and /var/tmp
+are now checked for their options. Comparison of the mount options has been
+improved. A new test has been added to check if /var/tmp has been bound to /tmp.
+
+
* Mac OS X improvements
-----------------------
Package manager Brew has been added
+
* nginx
-------
Show suggestion when weak protocol is used, like SSLv2 or SSLv3. The protocols
@@ -95,6 +106,7 @@ Priority: 1) argument, 2) profile, 3) default
--plugindir is now an alias for --plugin-dir
+
* Profiles
----------
Lynis now support multiple profiles. By using a file 'custom.prf', it allows to
@@ -114,16 +126,18 @@ The configuration of SSH is now parsed from the SSH daemon directly. This enable
handling with new defaults more easily, as OpenSSH sometimes introduces new keys,
or change their default value between versions.
+
* Systemd
---------
-Added support for detecting systemd and reporting it as a service manager.
+Added support for detecting systemd and reporting it as a service manager. The
+systemd plugin has been released as a community plugin.
-The systemd plugin has been released as a community plugin.
* Uploads
---------
Solved a bug which added the proxy configuration twice.
+
* General improvements
----------------------
The screen output has been improved, to show more meaningful things when some
@@ -181,6 +195,8 @@ Remove --config option, use lynis show profiles instead
[DBS-1860] Check for status of DB2
[CRYP-7902] Support for multiple profiles, improved logging
[FILE-6372] Properly checking for /etc/fstab now, ignore comments
+[FILE-6374] Added /dev/shm and /var/tmp
+[FILE-6374] New test for /var/tmp
[FILE-7524] Support for multiple profiles
[HTTP-6710] Trigger suggestion when weak protocols SSLv2/SSLv3 are used
[KRNL-5788] Support for kernel with grsecurity patches (linux-image-grsec)