Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-01-07Preparation for release 3.0.3Michael Boelen
2020-10-25Merge branch 'master' into add-suricata-ids-ips-testMichael Boelen
2020-10-22Add translate function for all sectionsStéphane
+ add EN and FR up to date languages files
2020-10-11Add test for Suricata IDS/IPSTimo Sigurdsson
Commit 94e0a4e added a test for the Suricata binary, but the result appears to be used nowhere. Add a proper test for an active Suricata daemon in the IDS/IPS tooling section. Signed-off-by: Timo Sigurdsson <public_timo.s@silentcreek.de>
2020-03-20Updated date/yearMichael Boelen
2019-12-18Code style improvement: quote argumentMichael Boelen
2019-09-17Implemented several code style improvementsMichael Boelen
2019-08-28[TOOL-5160] added support for OSSEC agent daemonMichael Boelen
2019-07-16Differentiate between a discovered binary and running processMichael Boelen
2019-07-16Use -n instead of ! -zMichael Boelen
2019-01-31Changed year and preparing for new releaseMichael Boelen
2018-10-23Added and changed description for TOOL-5160Michael Boelen
2018-10-23Renamed variableMichael Boelen
2018-10-23[TOOL-5160] OSSEC detection testMichael Boelen
2018-01-11Changed yearMichael Boelen
2017-10-29Code enhancements, improve detection for PuppetMichael Boelen
2017-08-17[TOOL-5002] performance enhancement to reduce number of dirs/files to checkMichael Boelen
2017-08-17[TOOL-5002] rewrite of Ansible detectionMichael Boelen
2017-08-17[TOOL-5002] Ansible detection addedMichael Boelen
2017-04-30[bulk change] cleaning up, code enhancements, initialization of variables, ↵Michael Boelen
and new tests
2017-04-23Code enhancementsMichael Boelen
2017-03-27Minor cleanupsMichael Boelen
2017-03-27Add additional check for Puppet toolMichael Boelen
2017-03-08A bunch of Solaris compatibility tweaks (#367)hlein
* Work around Solaris' /bin/sh not being POSIX. If /usr/xpg4/bin/sh is present, we are (definitely?) on Solaris or a derivative, and /bin/sh cannot be trusted to support POSIX, but /usr/xpg4/bin/sh can be. Exec it right away. * Work around Solaris 'which' command oddity. Solaris' (at least) 'which' command outputs not-found errors to STDOUT instead of STDERR. This makes "did we get any output from which" checks insufficient; piping to grep -v the "no foo in ..." message should work. Note that this patch set includes all such uses of which that I could find, including ones that should never be reached on Solaris (i.e. only executed on some other OS) just for consistency. * Improved alternate-sh exec to avoid looping. * Solaris' /usr/ucb/echo supports -n. * Check for the best hash type that openssl supports. When using openssl to generate hashes, do not assume it supports sha256; try that, then sha1, then give up and use md5. * Solaris does not support sed -i; use a tempfile. * Use the full path for modinfo. When running as non-root, /usr/sbin/ might not be in PATH. include/tests_accounting already calls modinfo by full path, but include/tests_kernel did not. * Solaris find does not support -maxdepth. This mirrors the logic already in tests_homedirs. * Use PSBINARY instead of ps. * Work around Solaris' date not supporting +%s. Printing nawk's srand value is a bizarre but apparently once popular workaround for there being no normal userland command to print UNIX epoch seconds. A perl one-liner is the other common approach, but nawk may be more reliably present on Solaris than perl. * Revert to using sha1 for HOSTID. * Whitespace cleanup for openssl hash tests.
2017-03-06Various cleanups (#363)hlein
* Typo fix. * Style change: always use $(), never ``. The Lynis code already mostly used $(), but backticks were sprinkled around. Converted all of them. * Lots of minor spelling/typo fixes. FWIW these were found with: find . -type f -print0 | xargs -0 cat | aspell list | sort -u | egrep '^[a-z]+$' | less And then reviewing the list to pick out things that looked like misspelled words as opposed to variables, etc., and then manual inspection of context to determine the intention.
2017-02-09Changed date and preparing for release2.4.1Michael Boelen
2016-09-26Add support for Rudder configuration management (#284)Florian Heigl
Rudder (http://www.rudder-project.org) is a config management tool with automatic reporting / dynamic policy adjustment. The "dynamic" bit happens using FusionInventory. The config management part uses CFEngine under the hood. I don't know if hw/os inventory tools also matter in the Lynis report, if yes, I can look into that too. This patch extends the path searched to detect a running CFEngine agent (and fileserver daemon) Since the agent is the same, this should immediately detect it.
2016-09-08Style improvements and command replacementsMichael Boelen
2016-08-25Use detected binariesMichael Boelen
2016-07-30Start of refactor fail2ban tests and splitting them into different test areasMichael Boelen
2016-07-24Rename of categories, introduction of groupsMichael Boelen
2016-06-18Replaced text strings to allow translationsMichael Boelen
2016-04-28Replaced old function names with new onesmboelen
2016-04-28Replaced functions and minor cleanupsmboelen
2016-04-15Change of variables for IDS/IPS and layout changesmboelen
2016-04-15[TOOL-5102] Imported Fail2ban support and minor improvementsmboelen
2016-04-15Replaced call to iptables with $IPTABLESBINARY (#167)Eric Light
* Replaced call to iptables with $IPTABLESBINARY * Check for iptables before checking Fail2Ban chain
2016-04-13Added tooling tests for Fail2Ban (#162)Eric Light
* Added binary for Fail2Ban * Added test for Fail2Ban (presence and configuration) * Added test to check for enabled Fail2Ban jails * Added test to confirm at least one enabled jail. Fixed regex. * Added check to confirm iptables has a fail2ban chain
2016-03-13Removed copyright line, added descriptionmboelen
2016-03-13Added link to website, blog, githubmboelen
2015-12-21Rename of logtext and report functions, upcoming year changemboelen
2015-09-08Improved tests and logging for automation toolsmboelen
2015-09-08Fixed typosAlexander Lobodzinski
2015-09-08Detect automation with Cfengine 3Alexander Lobodzinski
2015-07-22Remove incomplete tests, code enhancementsmboelen
2015-05-26Changed last linemboelen
2015-05-25Chef support addedmboelen
2015-01-03Update of the files to reflect HTTPS version of website and 2015. Happy New ↵mboelen
Year!
2014-12-05Log status of Salt tools and add them to reportmboelen
2014-09-18Added SaltStack toolingmboelen