Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormboelen <michael@cisofy.com>2014-11-29 18:20:53 +0300
committermboelen <michael@cisofy.com>2014-11-29 18:20:53 +0300
commit52eecfb57594f8dd494d1efdf894a42b683f327f (patch)
tree0f97abbc1ab1ecc28b46e9816eaf94c4202bfbf3 /default.prf
parent33720a54ac40c5078c333225fa83b114bc3f58b5 (diff)
Textual improvements
Diffstat (limited to 'default.prf')
-rw-r--r--default.prf24
1 files changed, 16 insertions, 8 deletions
diff --git a/default.prf b/default.prf
index 1bf67b60..50e0726f 100644
--- a/default.prf
+++ b/default.prf
@@ -5,7 +5,7 @@
# This is the default profile and is used as a baseline when testing systems and
# applications. Since there are generally no "best" options, Lynis will assume
# some default values.
-#
+#
# All empty lines or with the # prefix will be skipped
#
# This is the default profile and contains default values. You are encouraged to
@@ -31,9 +31,12 @@ config:show_tool_tips:1:
#
#################################################################################
-# ** Scan type (how deep test has to be, light, normal or full) **
+# ** Scan type **
+#
+# Description: How deep the audit should be
+# Values: light, normal or full (default)
#
-# config:test_scan_mode:light|normal|full:
+# config:test_scan_mode:full:
# ** Skip one or more specific tests **
@@ -42,8 +45,10 @@ config:show_tool_tips:1:
# config:test_skip_always:AAAA-1234 BBBB-5678 CCCC-9012:
-# ** Define the role(s) of a machine **
-# Values: desktop|server (default: server)
+# ** Define machine role **
+#
+# Description: defines the role of the system
+# Values: desktop, server (default)
#
#config:machine_role:server:
@@ -69,9 +74,12 @@ plugin=dns
plugin=docker
plugin=file-integrity
plugin=file-systems
-plugin=files
plugin=firewalls
+plugin=forensics
+plugin=intrusion-detection
+plugin=intrusion-prevention
plugin=kernel
+plugin=malware
plugin=memory
plugin=nginx
plugin=processes
@@ -84,9 +92,9 @@ plugin=users
#################################################################################
#
-# Sysctl options
+# Kernel options
# ---------------
-# sysctl:<Sysctl Key>:<Expected Value>:<Hardening Points>:<Description>:
+# sysctl:<sysctl Key>:<Expected Value>:<Hardening Points>:<Description>:
#
# Sysctl key = name
# Expected value = value of sysctl key