Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/db
AgeCommit message (Collapse)Author
2020-05-20Update nlJaimie
2020-04-12Merge pull request #883 from topimiettinen/check-encrypted-swap-devicesMichael Boelen
Check if system uses encrypted swap devices
2020-04-06Added Russian translation0xD503
Added Russian localization
2020-04-04Added new test NETW-2400Michael Boelen
2020-04-03Merge pull request #899 from bginsbach/auth-9218Michael Boelen
AUTH-9218 Improvements
2020-04-03Combine AUTH-9218 and AUTH-9489Brian Ginsbach
These two tests are essentially identical. There is no need separate the DragonFly and FreeBSD tests. This will make it easier to add support for other BSD systems.
2020-04-02Added new test PHP-2382Michael Boelen
2020-04-01Added FILE-6394Michael Boelen
2020-03-27Check if system uses encrypted swap devicesTopi Miettinen
Add test CRYP-7931 to check if the system uses any encrypted swap devices. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-24Added new testsMichael Boelen
2020-03-24Merge pull request #880 from konstruktoid/grphashroundsMichael Boelen
Add test for group password hash rounds
2020-03-24add AUTH-9230Thomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-03-23Run 'systemd-analyze security'Topi Miettinen
'systemd-analyze security' (available since systemd v240) makes a nice overall evaluation of hardening levels of services in a system. More details can be found with 'systemd-analyze security SERVICE' for each service. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-23Merge pull request #878 from topimiettinen/check-ima-evmMichael Boelen
Check IMA/EVM, dm-integrity and dm-verity statuses
2020-03-23Merge pull request #874 from topimiettinen/check-password-hashing-methodsMichael Boelen
Check password hashing methods
2020-03-23Check for dm-integrity and dm-verityTopi Miettinen
Detect tools for dm-integrity and dm-verity, check if some devices in /dev/mapper/* use them and especially the system root device. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-22Check IMA/EVM statusTopi Miettinen
Check for evmctl (Extended Verification Module) tool and system IMA (Integrity Measurement Architecture) status. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-21Check for software pseudo random number generatorsTopi Miettinen
Check for running audio-entropyd, havegd or jitterentropy-rngd. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-21Merge branch 'master' into netbsd-eolMichael Boelen
2020-03-21Check password hashing methodsTopi Miettinen
Manual page crypt(5) gives recommendations for choosing password hashing methods, so let's check if there are weakly encrypted passwords in the system. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-20Add NetBSD EOL dataBrian Ginsbach
2020-03-20Add a way to signify undetermined EOLBrian Ginsbach
Replace setting an artificaly high date and converted date for operating systems with no EOL (rolling) or the EOL is still to be determined. This makes it easier for humans and saves making a comparison (when using an artifically high converted time) will always be false (EOL=0). An example entry os:AGreatOS 2.0::-1: The converted time (seconds since the epoch) could be specified as zero but this typically means the OS is out of date (now), A value of -1 is a convention indicating no EOL.
2020-03-20Shortened CentOS 7/8 strings to allow match and added noteMichael Boelen
2020-03-20Added CentOS 8 end-of-lifeMichael Boelen
2020-03-20Add CentOS 7 (Core)Michael Boelen
2020-03-20Update tests.dbMichael Boelen
Corrected test ID
2020-03-20Check DNSSEC status with resolvectl when availableTopi Miettinen
'resolvectl statistics' shows if DNSSEC is supported by systemd-resolved and upstream DNS servers. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-19Check for rEFInd boot loaderTopi Miettinen
Detect rEFInd boot loader (https://www.rodsbooks.com/refind/). Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-02-15[CRYP-8004] enhanced after pulling in initital testMichael Boelen
2019-10-08Test SINT-7010 in macOS onlypyllyukko
2019-10-08Added new test DBS-1828Michael Boelen
2019-10-08Update description for FILE-6374Michael Boelen
2019-09-12Added additional stringMichael Boelen
2019-09-03Ordering of entriesMichael Boelen
2019-09-03Add Debian EOL2*yo
2019-08-29Added CRYP-8002Michael Boelen
2019-08-28Changed description of TOOL-5160Michael Boelen
2019-08-26Added FINT-4316Michael Boelen
2019-08-22Added NETW-3200Michael Boelen
2019-08-21[CRYP-7930] changed descriptionMichael Boelen
2019-08-13Added data and detection of Amazon LinuxMichael Boelen
2019-08-13Added end-of-life data for Arch Linux (rolling)Michael Boelen
2019-08-08Sorting and added new stringsMichael Boelen
2019-07-26Added HOME-9304 and HOME-9306Michael Boelen
2019-07-16Added new tests INSE-8318 and INSE-8320Michael Boelen
2019-07-15Renamed STRG-1840 and STRG-1842Michael Boelen
2019-07-14Added testsMichael Boelen
2019-07-10Added new test: PROC-3802Michael Boelen
2019-07-09Added CRYP-7930Michael Boelen
2019-07-07Changed Ubuntu 18.10 periodMichael Boelen