Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-01-31Added MALW-3274 to detect McAfee VirusScan Command Line ScannerMichael Boelen
2021-07-27Added MALW-3290Michael Boelen
2021-05-11Added CRYP-8006Michael Boelen
2021-05-11Merge pull request #1139 from ↵Michael Boelen
teoberi/New-test-BOOT-5140---Check-for-ELILO-boot-loader-presence New test: BOOT-5140 - Check for ELILO boot loader presence
2021-05-11Added ACCT-9672Michael Boelen
2021-05-11Added ACCT-9670Michael Boelen
2021-01-07Merge pull request #905 from topimiettinen/check-non-native-binary-formatsMichael Boelen
Check for registered non-native binary formats
2021-01-03Update tests.dbteoberi
Add TestID for ELILO
2020-12-17Merge pull request #1062 from Varbin/solaris-loghost-not-localhostMichael Boelen
Test if loghost is not localhost
2020-12-15Merge pull request #1064 from Varbin/solaris-ips-svcsMichael Boelen
Add support for Solaris services, run BOOT-5184 there
2020-12-15Mark test as multi-OS by removing all valuesMichael Boelen
2020-11-09spelling: authoritativeJosh Soref
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-10-26Add support for Solaris services, run BOOT-5184 thereSimon Biewald
The Solaris IPS service manager (svcs) is now detected, and services managed with it are enumerated. Test BOOT-5184 now runs on Solaris, too, as SysV init scripts are supported as well, even with IPS. SysV Init has been the traditional init system on Solaris.
2020-10-25Test if loghost is not localhostSimon Biewald
On Solaris, the name loghost can be used to point to remote log servers. By default loghost is configured to 127.0.0.1, logging to the local machine. Thus a new test - LOGG-2153 - is created to test if loghost is not localhost and LOGG-2154 is modified to ignore @loghost lines if loghost is localhost.
2020-10-25Merge branch 'master' into add-suricata-ids-ips-testMichael Boelen
2020-10-22Include AUTH-9284 and minor changesMichael Boelen
2020-10-11Update tests.db and CHANGELOG.md for new test TOOL-5130Timo Sigurdsson
Add the new test TOOL-5130 (Check for active Suricata daemon) to the tests database and update the changelog accordingly. Signed-off-by: Timo Sigurdsson <public_timo.s@silentcreek.de>
2020-07-09add new test to test databaseSimon Biewald
2020-04-12Merge pull request #883 from topimiettinen/check-encrypted-swap-devicesMichael Boelen
Check if system uses encrypted swap devices
2020-04-10Check for registered non-native binary formatsTopi Miettinen
Examine /proc/sys/fs/binfmt_misc (Linux) for additional registered binary formats. Those are probably emulated and their emulation could be less tested, more buggy and more vulnerable than native binary formats, so they should be disabled when not needed. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-04-04Added new test NETW-2400Michael Boelen
2020-04-03Merge pull request #899 from bginsbach/auth-9218Michael Boelen
AUTH-9218 Improvements
2020-04-03Combine AUTH-9218 and AUTH-9489Brian Ginsbach
These two tests are essentially identical. There is no need separate the DragonFly and FreeBSD tests. This will make it easier to add support for other BSD systems.
2020-04-02Added new test PHP-2382Michael Boelen
2020-04-01Added FILE-6394Michael Boelen
2020-03-27Check if system uses encrypted swap devicesTopi Miettinen
Add test CRYP-7931 to check if the system uses any encrypted swap devices. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-24Added new testsMichael Boelen
2020-03-24Merge pull request #880 from konstruktoid/grphashroundsMichael Boelen
Add test for group password hash rounds
2020-03-24add AUTH-9230Thomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-03-23Run 'systemd-analyze security'Topi Miettinen
'systemd-analyze security' (available since systemd v240) makes a nice overall evaluation of hardening levels of services in a system. More details can be found with 'systemd-analyze security SERVICE' for each service. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-23Merge pull request #878 from topimiettinen/check-ima-evmMichael Boelen
Check IMA/EVM, dm-integrity and dm-verity statuses
2020-03-23Merge pull request #874 from topimiettinen/check-password-hashing-methodsMichael Boelen
Check password hashing methods
2020-03-23Check for dm-integrity and dm-verityTopi Miettinen
Detect tools for dm-integrity and dm-verity, check if some devices in /dev/mapper/* use them and especially the system root device. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-22Check IMA/EVM statusTopi Miettinen
Check for evmctl (Extended Verification Module) tool and system IMA (Integrity Measurement Architecture) status. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-21Check for software pseudo random number generatorsTopi Miettinen
Check for running audio-entropyd, havegd or jitterentropy-rngd. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-21Check password hashing methodsTopi Miettinen
Manual page crypt(5) gives recommendations for choosing password hashing methods, so let's check if there are weakly encrypted passwords in the system. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-20Update tests.dbMichael Boelen
Corrected test ID
2020-03-20Check DNSSEC status with resolvectl when availableTopi Miettinen
'resolvectl statistics' shows if DNSSEC is supported by systemd-resolved and upstream DNS servers. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-19Check for rEFInd boot loaderTopi Miettinen
Detect rEFInd boot loader (https://www.rodsbooks.com/refind/). Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-02-15[CRYP-8004] enhanced after pulling in initital testMichael Boelen
2019-10-08Test SINT-7010 in macOS onlypyllyukko
2019-10-08Added new test DBS-1828Michael Boelen
2019-10-08Update description for FILE-6374Michael Boelen
2019-08-29Added CRYP-8002Michael Boelen
2019-08-28Changed description of TOOL-5160Michael Boelen
2019-08-26Added FINT-4316Michael Boelen
2019-08-22Added NETW-3200Michael Boelen
2019-08-21[CRYP-7930] changed descriptionMichael Boelen
2019-07-26Added HOME-9304 and HOME-9306Michael Boelen
2019-07-16Added new tests INSE-8318 and INSE-8320Michael Boelen