| Age | Commit message (Collapse) | Author |
|---|
|
|
|
Check for registered non-native binary formats
|
|
|
|
|
|
Test for LINUX_VERSION before setting it again
|
|
[DBS-1816] Force test to check only password authentication
|
|
Add and improvements strings (GUI)
|
|
fix syntax must include ${}
|
|
|
|
Fix for Test: DBS-1816 - Check empty MySQL root password
|
|
|
|
It is possible that NetBSD has the `proc` filesystem mounted. When
`/proc` is mounted there will be a `/proc/cpuinfo`. Handle the simple
case first (`proc` filesystem mounted). There are multiple other means
to determine PAE/NX without `/proc/cpuinfo`.
|
|
Support specifying multiple platforms with `--platform`. Useful as
not all operating systems identify identical hardware (platforms)
with the same name (example x86_64 and amd64).
|
|
|
|
|
|
|
|
only fail AUTH-9230 if both SHA_CRYPT_{MIN,MAX}_ROUNDS are undefined
|
|
|
|
|
|
Redirect output of the count and every error to /dev/null, so we only get the exit code
|
|
Addition and improvement of translated strings
|
|
Test if loghost is not localhost
|
|
|
|
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
|
|
[NETW-3012] Use netstat on Solaris to gather listening ports
|
|
Add support for Solaris services, run BOOT-5184 there
|
|
Extend German translation and add more translated statuses
|
|
Quote binary variables during SUID/GID enumeration
|
|
Use first e1000 interface and break after match (for hostid generation on Solaris)
|
|
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
|
|
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
|
|
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
|
|
Fixes problem #1077
|
|
Fixes cisofy/lynis#1078.
Signed-off-by: Simon Biewald <sbiewald@fam-biewald.de>
|
|
Fixes CISOfy/lynis#1075.
Before this commit, the interfaces "e1000g1" and "net0" were allowed.
The name "e1000g0" is appended to the list.
After finding an interface, the loop is interrupted now. As previously
"net0" was always used, even if another interface was available, the list
is reordered to "net0 e1000g1 e1000g0" to not break previous generations.
A typo is also fixed ("No interface found op Solaris ..." -> "No
interface found on").
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
|
|
See-Also: HEAD^
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
|
|
Test if /etc/grub.d is a directory
|
|
OpenSolaris distribution detection
|
|
Add NixOS and IPFire
|
|
Fixes cisofy/lynis#1068.
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
|
|
Fixes cisofy/lynis#1040.
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
|
|
New variable OPENSOLARIS to distringuish between Oracle Solaris and
OpenSolaris derivates. The edge case of OpenSolaris itself is not yet
solved, but OpenSolaris itself should be very rare these days.
Currently detected and distinguished Solaris variants are:
- Oracle Solaris >= 11 (exluding Solaris Express and OpenSolaris)
- Solaris < 11 (as "Sun Solaris")
- OmniosCE (but not old Omnios)
- OpenIndiana
- Shillix
- SmartOS
- Tribblix
- "Unknown Illumos" for unknown distributions based on Illumos
Lynis will fall back to "Sun Solaris" with "SunOS 5.X" for unknown
distributions.
|
|
The "new" service manager was included with Solaris 10 and not 11. It is
named "service management facility" (see smf(5) man page).
There is no IPS service manager, the name is only used for the package
manager of OpenSolaris and Solaris 11.
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
|
|
Simplify tr hostname checking expression
|
|
Use `od` only for displaying invalid characters
|
|
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
|
|
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
|
|
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
|
|
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
|
|
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
|
