Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-03-30Improved text about software packagesMichael Boelen
2020-03-30Move Repology link and text change for packagesMichael Boelen
2020-03-30Merge pull request #884 from topimiettinen/add-repology-badgeMichael Boelen
README.md: add repology badge
2020-03-28README.md: add repology badgeTopi Miettinen
Show downstream usage for various versions of Lynis. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-25[FINT-4339] define what file to check forMichael Boelen
2020-03-25Corrected requirements to run testsMichael Boelen
2020-03-25Updated logMichael Boelen
2020-03-25Added notes to NETW-3200 for future extending this testMichael Boelen
2020-03-25[NETW-3200] corrected testMichael Boelen
2020-03-25Add specific control ID for warnings regarding usage of deprecated optionsMichael Boelen
2020-03-25Merge branch 'master' of https://github.com/CISOfy/lynisMichael Boelen
2020-03-25Improved warning message with 'how to resolve'Michael Boelen
2020-03-25Merge pull request #881 from topimiettinen/enhance-fs-totalsMichael Boelen
[FILE-6374]: Summarize unhardened file system
2020-03-25[FILE-6374]: Summarize unhardened file systemTopi Miettinen
Report total numbers of unhardened filesystems. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-24Merge pull request #862 from topimiettinen/blacklist-fsMichael Boelen
FS module tests: check if modules are blacklisted
2020-03-24Added new testsMichael Boelen
2020-03-24Merge pull request #824 from Varbin/masterMichael Boelen
Add detection of OpenNTPD
2020-03-24Merge pull request #860 from topimiettinen/harden-mount-optionsMichael Boelen
Harden mount options for /var, check also /dev and /run
2020-03-24Merge pull request #879 from topimiettinen/enhance-tomoyo-checkMichael Boelen
Enhance TOMOYO Linux check
2020-03-24Updated logMichael Boelen
2020-03-24Merge pull request #880 from konstruktoid/grphashroundsMichael Boelen
Add test for group password hash rounds
2020-03-24Merge pull request #866 from topimiettinen/run-systemd-analyze-securityMichael Boelen
Run 'systemd-analyze security'
2020-03-24fix indentationThomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-03-24fix tabsThomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-03-24AUTH-9229 isnt related to login.defs, add AUTH-9230Thomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-03-24add AUTH-9230Thomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-03-23Enhance TOMOYO Linux checkTopi Miettinen
Count and log unconfined processes, which are not using policy profile 3. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-23FS module tests: check if modules are blacklistedTopi Miettinen
Check if FS modules are blacklisted. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-23Run 'systemd-analyze security'Topi Miettinen
'systemd-analyze security' (available since systemd v240) makes a nice overall evaluation of hardening levels of services in a system. More details can be found with 'systemd-analyze security SERVICE' for each service. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-23Removed incorrect process name from list, enable --full as it is required ↵Michael Boelen
for matching jitterentropy-rngd
2020-03-23Merge branch 'master' of https://github.com/CISOfy/lynisMichael Boelen
2020-03-23Fixed 'lynis show details' outputMichael Boelen
2020-03-23Merge pull request #876 from topimiettinen/enhance-apparmor-checkMichael Boelen
Enhance AppArmor check
2020-03-23[CRYP-8005] added haveged, match against process name instead of full ↵Michael Boelen
command line, code cleanup
2020-03-23Updated logMichael Boelen
2020-03-23Merge branch 'master' of https://github.com/CISOfy/lynisMichael Boelen
2020-03-23[AUTH-9229] make test only available for rootMichael Boelen
2020-03-23Merge pull request #878 from topimiettinen/check-ima-evmMichael Boelen
Check IMA/EVM, dm-integrity and dm-verity statuses
2020-03-23Updated logMichael Boelen
2020-03-23Merge pull request #874 from topimiettinen/check-password-hashing-methodsMichael Boelen
Check password hashing methods
2020-03-23Removed restriction for using the plugin and code style improvementsMichael Boelen
2020-03-23Merge pull request #865 from topimiettinen/journald-fix-disk-usageMichael Boelen
Fix journalctl output parsing for recent journalctls
2020-03-23[AUTH-9252] corrected permission checkMichael Boelen
2020-03-23Check for dm-integrity and dm-verityTopi Miettinen
Detect tools for dm-integrity and dm-verity, check if some devices in /dev/mapper/* use them and especially the system root device. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-22Updated logMichael Boelen
2020-03-22Merge pull request #877 from bginsbach/auth-9268-add-bsdMichael Boelen
Add FreeBSD and NetBSD to AUTH-9268
2020-03-22Merge pull request #869 from bginsbach/auth-9234-netbsdMichael Boelen
Add AUTH-9234 for NetBSD
2020-03-22Check IMA/EVM statusTopi Miettinen
Check for evmctl (Extended Verification Module) tool and system IMA (Integrity Measurement Architecture) status. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-22Add FreeBSD and NetBSD to AUTH-9268Brian Ginsbach
Add FreeBSD and NetBSD as both support PAM. Simplify the PREQS_MET test by using a case rather than a long if or.
2020-03-22Combine NetBSD and OpenBSD AUTH-9234 checkBrian Ginsbach
Both NetBSD and OpenBSD have `useradd(8)`, so they can share logic checking `/etc/usermgmt.conf` for the default user UID range.