Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-12-15Merge pull request #1064 from Varbin/solaris-ips-svcsMichael Boelen
Add support for Solaris services, run BOOT-5184 there
2020-12-15Mark test as multi-OS by removing all valuesMichael Boelen
2020-11-09spelling: authoritativeJosh Soref
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-10-26Add support for Solaris services, run BOOT-5184 thereSimon Biewald
The Solaris IPS service manager (svcs) is now detected, and services managed with it are enumerated. Test BOOT-5184 now runs on Solaris, too, as SysV init scripts are supported as well, even with IPS. SysV Init has been the traditional init system on Solaris.
2020-10-25Merge branch 'master' into add-suricata-ids-ips-testMichael Boelen
2020-10-22Include AUTH-9284 and minor changesMichael Boelen
2020-10-11Update tests.db and CHANGELOG.md for new test TOOL-5130Timo Sigurdsson
Add the new test TOOL-5130 (Check for active Suricata daemon) to the tests database and update the changelog accordingly. Signed-off-by: Timo Sigurdsson <public_timo.s@silentcreek.de>
2020-07-09add new test to test databaseSimon Biewald
2020-04-12Merge pull request #883 from topimiettinen/check-encrypted-swap-devicesMichael Boelen
Check if system uses encrypted swap devices
2020-04-04Added new test NETW-2400Michael Boelen
2020-04-03Merge pull request #899 from bginsbach/auth-9218Michael Boelen
AUTH-9218 Improvements
2020-04-03Combine AUTH-9218 and AUTH-9489Brian Ginsbach
These two tests are essentially identical. There is no need separate the DragonFly and FreeBSD tests. This will make it easier to add support for other BSD systems.
2020-04-02Added new test PHP-2382Michael Boelen
2020-04-01Added FILE-6394Michael Boelen
2020-03-27Check if system uses encrypted swap devicesTopi Miettinen
Add test CRYP-7931 to check if the system uses any encrypted swap devices. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-24Added new testsMichael Boelen
2020-03-24Merge pull request #880 from konstruktoid/grphashroundsMichael Boelen
Add test for group password hash rounds
2020-03-24add AUTH-9230Thomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-03-23Run 'systemd-analyze security'Topi Miettinen
'systemd-analyze security' (available since systemd v240) makes a nice overall evaluation of hardening levels of services in a system. More details can be found with 'systemd-analyze security SERVICE' for each service. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-23Merge pull request #878 from topimiettinen/check-ima-evmMichael Boelen
Check IMA/EVM, dm-integrity and dm-verity statuses
2020-03-23Merge pull request #874 from topimiettinen/check-password-hashing-methodsMichael Boelen
Check password hashing methods
2020-03-23Check for dm-integrity and dm-verityTopi Miettinen
Detect tools for dm-integrity and dm-verity, check if some devices in /dev/mapper/* use them and especially the system root device. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-22Check IMA/EVM statusTopi Miettinen
Check for evmctl (Extended Verification Module) tool and system IMA (Integrity Measurement Architecture) status. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-21Check for software pseudo random number generatorsTopi Miettinen
Check for running audio-entropyd, havegd or jitterentropy-rngd. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-21Check password hashing methodsTopi Miettinen
Manual page crypt(5) gives recommendations for choosing password hashing methods, so let's check if there are weakly encrypted passwords in the system. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-20Update tests.dbMichael Boelen
Corrected test ID
2020-03-20Check DNSSEC status with resolvectl when availableTopi Miettinen
'resolvectl statistics' shows if DNSSEC is supported by systemd-resolved and upstream DNS servers. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-19Check for rEFInd boot loaderTopi Miettinen
Detect rEFInd boot loader (https://www.rodsbooks.com/refind/). Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-02-15[CRYP-8004] enhanced after pulling in initital testMichael Boelen
2019-10-08Test SINT-7010 in macOS onlypyllyukko
2019-10-08Added new test DBS-1828Michael Boelen
2019-10-08Update description for FILE-6374Michael Boelen
2019-08-29Added CRYP-8002Michael Boelen
2019-08-28Changed description of TOOL-5160Michael Boelen
2019-08-26Added FINT-4316Michael Boelen
2019-08-22Added NETW-3200Michael Boelen
2019-08-21[CRYP-7930] changed descriptionMichael Boelen
2019-07-26Added HOME-9304 and HOME-9306Michael Boelen
2019-07-16Added new tests INSE-8318 and INSE-8320Michael Boelen
2019-07-15Renamed STRG-1840 and STRG-1842Michael Boelen
2019-07-14Added testsMichael Boelen
2019-07-10Added new test: PROC-3802Michael Boelen
2019-07-09Added CRYP-7930Michael Boelen
2019-04-04Added new testsMichael Boelen
2019-04-02Added PKGS-7420Michael Boelen
2019-03-07Add new testsMichael Boelen
2019-03-05better OpenBSD support (#641)jirib
2018-12-14[FIRE-4534] Additional support for Hands Off!, LuLu, and Radio SilenceMichael Boelen
2018-10-23Added SSH-7406 to detect OpenSSH version + condition based checking in SSH-7408Michael Boelen
2018-10-23Added and changed description for TOOL-5160Michael Boelen