Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/include/tests_shells
AgeCommit message (Collapse)Author
2022-02-14#1270 added finding configuration files in the "etc" directory, even if they ↵Wojciech Banaś
are symlinks
2021-01-07Preparation for release 3.0.3Michael Boelen
2020-10-22Add translate function for all sectionsStéphane
+ add EN and FR up to date languages files
2020-03-20Updated date/yearMichael Boelen
2020-02-25Update tests_shellsSkactor
Write function as variable due to careless error
2019-12-18Code style improvement: quote argumentMichael Boelen
2019-09-21Fixed a typoMichael Boelen
2019-07-26Use IsRunning exit code instead of variableMichael Boelen
2019-07-16Use -n instead of ! -zMichael Boelen
2019-04-09Updated descriptionsMichael Boelen
2019-04-09fix SHLL-6220 description (#673)Capashenn
2019-01-31Changed year and preparing for new releaseMichael Boelen
2019-01-14Added STATUS_WEAKMichael Boelen
2018-12-13[SHLL-6230] Add etc/bash.bashrc.local to umask check (#595)Katarina Durechova
2018-07-24Fix for umask check in case of multiple files (#560)gkrystev
In case when umask is checked in multiple files and in some of the files except the last one a weak umask is found, the tool reports weak mask for the rest of the files. In the example bellow, the weak umask is only in /etc/csh.cshrc. However, the check /etc/profile is reported weak as well. Expected: Checking default umask values Checking default umask in /etc/bashrc [ OK ] Checking default umask in /etc/csh.cshrc [ WEAK ] Checking default umask in /etc/profile [ OK ] Actual: Checking default umask values Checking default umask in /etc/bashrc [ OK ] Chhhhecking default umask in /etc/csh.cshrc [ WEAK ] Chhhhecking default umask in /etc/profile [ WEAK ]
2018-01-11Changed yearMichael Boelen
2017-09-18[SHLL-6220] Improved detection of shell settings like TMOUTMichael Boelen
2017-05-03Code enhancementsMichael Boelen
2017-05-03[SHLL-6290] Removed ShellShock test as it is no longer needed - CVE-2017-8108Michael Boelen
2017-04-30[bulk change] cleaning up, code enhancements, initialization of variables, ↵Michael Boelen
and new tests
2017-04-23Code enhancementsMichael Boelen
2017-03-08A bunch of Solaris compatibility tweaks (#367)hlein
* Work around Solaris' /bin/sh not being POSIX. If /usr/xpg4/bin/sh is present, we are (definitely?) on Solaris or a derivative, and /bin/sh cannot be trusted to support POSIX, but /usr/xpg4/bin/sh can be. Exec it right away. * Work around Solaris 'which' command oddity. Solaris' (at least) 'which' command outputs not-found errors to STDOUT instead of STDERR. This makes "did we get any output from which" checks insufficient; piping to grep -v the "no foo in ..." message should work. Note that this patch set includes all such uses of which that I could find, including ones that should never be reached on Solaris (i.e. only executed on some other OS) just for consistency. * Improved alternate-sh exec to avoid looping. * Solaris' /usr/ucb/echo supports -n. * Check for the best hash type that openssl supports. When using openssl to generate hashes, do not assume it supports sha256; try that, then sha1, then give up and use md5. * Solaris does not support sed -i; use a tempfile. * Use the full path for modinfo. When running as non-root, /usr/sbin/ might not be in PATH. include/tests_accounting already calls modinfo by full path, but include/tests_kernel did not. * Solaris find does not support -maxdepth. This mirrors the logic already in tests_homedirs. * Use PSBINARY instead of ps. * Work around Solaris' date not supporting +%s. Printing nawk's srand value is a bizarre but apparently once popular workaround for there being no normal userland command to print UNIX epoch seconds. A perl one-liner is the other common approach, but nawk may be more reliably present on Solaris than perl. * Revert to using sha1 for HOSTID. * Whitespace cleanup for openssl hash tests.
2017-03-06Various cleanups (#363)hlein
* Typo fix. * Style change: always use $(), never ``. The Lynis code already mostly used $(), but backticks were sprinkled around. Converted all of them. * Lots of minor spelling/typo fixes. FWIW these were found with: find . -type f -print0 | xargs -0 cat | aspell list | sort -u | egrep '^[a-z]+$' | less And then reviewing the list to pick out things that looked like misspelled words as opposed to variables, etc., and then manual inspection of context to determine the intention.
2017-02-09Changed date and preparing for release2.4.1Michael Boelen
2016-09-08Style improvements and command replacementsMichael Boelen
2016-08-25Use detected binariesMichael Boelen
2016-08-10Removed unneeded fieldMichael Boelen
2016-08-10Removed unneeded field for warnings and suggestionsMichael Boelen
2016-07-30Initialize variable and unset at endMichael Boelen
2016-07-24Rename of categories, introduction of groupsMichael Boelen
2016-06-18Replaced text strings to allow translationsMichael Boelen
2016-05-03Rewritten counters and dealing with valuesMichael Boelen
2016-04-28Replaced old function names with new onesmboelen
2016-03-13Added link to website, blog, githubmboelen
2016-01-11Use CreateTempFile for creation of temporary filesmboelen
2015-12-21Rename of logtext and report functions, upcoming year changemboelen
2015-10-10Optimized use of cat, grep and awk.SiemKorteweg
Detection of duplicate entries in /etc/hosts is now more robust. On CentOS7 the SERVICE_MANAGER is detected correctly.
2015-09-10Add test [SHLL-6230] to test for umask values in common shell configuration ↵mboelen
files
2015-05-27Removing tests which were already performed in authentication section.mboelen
2015-03-17Check timeout sessions and if they are readonlymboelen
2015-03-17Enhance timeout check and ensure there are .sh files in /etc/profile.dmboelen
2015-01-16Disabling Shellshock test as it gives false positivesmboelen
2015-01-03Update of the files to reflect HTTPS version of website and 2015. Happy New ↵mboelen
Year!
2014-11-04Minor improvements to Shellshock testmboelen
2014-10-27Hide RPM related database errors, show suggestion insteadmboelen
2014-10-19Improved Shellshock test by searching for bash via which if /etc/shell is ↵mboelen
not present
2014-10-06When searching for bash shell, skip comment lines and only take first hit ↵mboelen
(e.g. Fedora has multiple hits) [SHLL-6290]
2014-10-06Added Shellshock test improvementsmboelen
2014-10-06Added shellshocker checks.d4t4king
2014-09-15Code cleanup and small enhancementsmboelen
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-19 10:14:03 +0300