Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/include/tests_crypto
AgeCommit message (Collapse)Author
2021-07-24Use posix egrep options, fixing issue #1166Zachary Lee Andrews
2021-03-04Check MemoryOverwriteRequest ControlNicolai Søborg
2021-01-07Preparation for release 3.0.3Michael Boelen
2020-10-22Merge pull request #1044 from delscate/masterMichael Boelen
Fix wc and head cmd when using busybox
2020-10-22Add translate function for all sectionsStéphane
+ add EN and FR up to date languages files
2020-10-19Fix head cmd with busyboxFabien Lehoussel
2020-10-02Resolved merge conflictMichael Boelen
2020-10-02Updated logMichael Boelen
2020-09-03Don't provide suggestion to install pseudo rng at this momentMichael Boelen
2020-08-07Merge pull request #913 from topimiettinen/check-der-certsMichael Boelen
[CRYP-7902] Check also certificates in DER format
2020-06-21fix stderr output from cryptsetup statusSteve8291
Redirected stderr to /dev/null to silence output of `cryptsetup status /swap.img` This was causing error output from my cron script. Otherwise, if the swap file is not encrypted then the following error will be printed: `Device swap.img not found`
2020-04-25[CRYP-7902] Check also certificates in DER formatTopi Miettinen
Check also certificates in DER (*.cer, *.der) format. Add /etc/refind.d/keys to list of certificate paths. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-04-12Merge pull request #883 from topimiettinen/check-encrypted-swap-devicesMichael Boelen
Check if system uses encrypted swap devices
2020-04-09Merge pull request #882 from topimiettinen/check-package-certificatesMichael Boelen
[CRYP-7902] Check also certificates provided by packages
2020-04-08 [CRYP-7902] Fixes issue #902 Martin Churchill
[CRYP-7902] Checks for SSL_CERTIFICATE_PATHS_TO_IGNORE fails to ignore sub-directories #902
2020-04-02[CRYP-7902] Optionally check also certificates provided by packagesTopi Miettinen
The package maintainers are not immune to mistakes or they might not always provide timely updates, so let's check (optionally) more certificates even if they are delivered by packages. I found three expired certificates in my Debian/unstable system, thanks to changed Lynis. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-27Check if system uses encrypted swap devicesTopi Miettinen
Add test CRYP-7931 to check if the system uses any encrypted swap devices. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-23Removed incorrect process name from list, enable --full as it is required ↵Michael Boelen
for matching jitterentropy-rngd
2020-03-23[CRYP-8005] added haveged, match against process name instead of full ↵Michael Boelen
command line, code cleanup
2020-03-21Check for software pseudo random number generatorsTopi Miettinen
Check for running audio-entropyd, havegd or jitterentropy-rngd. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-20Updated date/yearMichael Boelen
2020-02-15[CRYP-8004] enhanced after pulling in initital testMichael Boelen
2020-01-06Added CRYP-8004pyllyukko
2019-12-18Code style improvement: quote argumentMichael Boelen
2019-10-19fix for #781 - run lsblk without --pathsKristian Schuster
2019-09-29crypto-test: suppress errors when devs are not accessible for cryptsetupKristian Schuster
2019-09-02[CRYP-7930] replaced incorrect PATH column with alternativeMichael Boelen
2019-08-29Added CRYP-8002Michael Boelen
2019-08-21Updated forensics variableMichael Boelen
2019-08-21[CRYP-7930] extend test to use cryptsetup/lsblk or crypttab fileMichael Boelen
2019-08-21Merge pull request #731 from chr0mag/cryp-7930Michael Boelen
[CRYP-7930] Modify to use 'lsblk' and 'cryptsetup'
2019-07-26Combined sort and uniq to sort -uMichael Boelen
2019-07-18Add FOUND var to unset listJulian Phillips
2019-07-18[CRYP-7930] Modify to use 'lsblk' and 'cryptsetup'Julian Phillips
There are several challenges with the existing method of using /etc/crypttab: 1)encrypted rootfs partitions are not typically listed in this file (users are prompted for password in early boot instead) 2)the 'luks' option is the default option so it is possible for /etc/crypttab entries to never have this set explicitly and any block device configured as such will be missed currently 3)any device mounted manually, or using any other mechanism aside from /etc/crypttab will be missed This commit executes 'cryptsetup isLuks' on every block device in the system to determine whether it is a LUKS device. This handles all 3 cases mentioned above. Test case wording was also updated to reflect the fact that it only checks for LUKS entrypted block devices. So, plain dm-crypt and TrueCrypt/VeraCrypt block device encryption is not detected. Nor is any file system level encryption such as eCryptfs, EncFs, gocryptfs.
2019-07-16Use -n instead of ! -zMichael Boelen
2019-07-09[CRYP-7903] enhanced test to properly workMichael Boelen
2019-07-09Added CRYP-7930Michael Boelen
2019-07-08Fix for incorrect subdirectory retrieval and adding enhancement to reduce ↵Michael Boelen
number of evaluations needed
2019-07-08New profile option to ignore specified certificate directoriesMichael Boelen
2019-01-31Changed year and preparing for new releaseMichael Boelen
2018-03-05[CRYP-7902] - Do prevalidation for certificates before testing themMichael Boelen
2018-01-11Changed yearMichael Boelen
2017-09-06[CRYP-7902] fix for bourne shell and rewriteMichael Boelen
2017-08-29Support spaces in file names (#444)Bruno Vernay
File names may contain spaces
2017-08-18[CRYP-7902] add a test to filter out non-certificate filesMichael Boelen
2017-08-18[CRYP-7902] certificate validation changedMichael Boelen
2017-07-18[CRYP-7902] prevent test from showing error on screen related to wrong ↵Michael Boelen
certificate file
2017-05-31A250 2 (#398)mslifcak
* fix missing ROOTDIR prefix * sort list of services before processing * sort list of certificates before processing * sort list of startup scripts before processing * spell check * remove possessive pronoun
2017-05-23250 fixes (#393)mslifcak
* restore use of lshw * add ROOTDIR to restore lost PHP file ref * refactor certificate search to benefit older "find" command
2017-03-14[CRYP-7902] Support for Plesk file namesMichael Boelen
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-25 23:35:57 +0300