Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-05-15Addedd OS detection for Oracle LinuxAditya Shastri
2020-04-22accept more restrictive file permissionsThomas Sjögren
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2020-04-12Merge pull request #883 from topimiettinen/check-encrypted-swap-devicesMichael Boelen
Check if system uses encrypted swap devices
2020-04-09Merge pull request #882 from topimiettinen/check-package-certificatesMichael Boelen
[CRYP-7902] Check also certificates provided by packages
2020-04-09Merge pull request #896 from Schmuuu/feature/raspi-detect-required-rebootMichael Boelen
extended test KRNL-5830 to detect required reboots on Raspbian
2020-04-09Merge pull request #904 from bginsbach/krnl-5677Michael Boelen
KRNL-5677 use platform instead of preqs-met
2020-04-08KRNL-5677 use platform instead of preqs-metBrian Ginsbach
2020-04-08 [CRYP-7902] Fixes issue #902 Martin Churchill
[CRYP-7902] Checks for SSL_CERTIFICATE_PATHS_TO_IGNORE fails to ignore sub-directories #902
2020-04-07[PROC-3802] added package manager routine as dependencyMichael Boelen
2020-04-06Added support to require a detected and known package managerMichael Boelen
2020-04-04[NETW-2400] Improved loggingMichael Boelen
2020-04-04Added new test NETW-2400Michael Boelen
2020-04-03[NETW-2706] allow usage of systemd-resolve and resolvectl, improved screen ↵Michael Boelen
output and logging
2020-04-03Merge pull request #899 from bginsbach/auth-9218Michael Boelen
AUTH-9218 Improvements
2020-04-03Merge pull request #898 from bginsbach/auth-9268Michael Boelen
AUTH-9268 Add DragonFly
2020-04-03[NETW-2706] redirect errors to stderrMichael Boelen
2020-04-03AUTH-9218 add NetBSD and OpenBSDBrian Ginsbach
All of the BSDs have `/etc/master.passwd`.
2020-04-03AUTH-9218 add requires rootBrian Ginsbach
The `/etc/master.passwd` file on BSD systems is (or should be) read/write root only. Skip the test if not being run as root.
2020-04-03Combine AUTH-9218 and AUTH-9489Brian Ginsbach
These two tests are essentially identical. There is no need separate the DragonFly and FreeBSD tests. This will make it easier to add support for other BSD systems.
2020-04-02AUTH-9268 Add DragonFlyBrian Ginsbach
DragonFly also supports PAM. Rework to use the `--os` option of `Register` rather than `--preqs-met` as the former can support a list.
2020-04-02extended test KRNL-5830 to detect required reboots on RaspbianKristian S
2020-04-02Added new test PHP-2382Michael Boelen
2020-04-02[PRNT-2308] check for Port statement and minor adjustments to testMichael Boelen
2020-04-02Renamed spools to spoolersMichael Boelen
2020-04-02[PRNT-2308] check also SSLListen statementsMichael Boelen
2020-04-02[CRYP-7902] Optionally check also certificates provided by packagesTopi Miettinen
The package maintainers are not immune to mistakes or they might not always provide timely updates, so let's check (optionally) more certificates even if they are delivered by packages. I found three expired certificates in my Debian/unstable system, thanks to changed Lynis. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-04-02Added fallback for awk/tr, small code enhancement, added noteMichael Boelen
2020-04-01The IsRunning function may have not everything defined early on, so added a ↵Michael Boelen
fallback
2020-04-01[LOGG-2190] skip mysqld related entriesMichael Boelen
2020-04-01Added quotesMichael Boelen
2020-04-01[TIME-3104] search for files using find and strip potential characters that ↵Michael Boelen
may be unexpected
2020-04-01Merge pull request #885 from sanderu/masterMichael Boelen
Adding test FILE-6394
2020-04-01Split count values so they are reported as individual itemsMichael Boelen
2020-03-31Enhance binaries reportTopi Miettinen
Report also number of set-uid and set-gid binaries found. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-31Merge pull request #887 from bginsbach/fix-auth-9229Michael Boelen
AUTH-9229 Do not use long options for sort
2020-03-31Corrected case where binaries were not checked while we do want to use ↵Michael Boelen
dmidecode if it available
2020-03-31Removed unneeded complexity regarding dmidecode, as binary checks are ↵Michael Boelen
already done at this point
2020-03-31Merge pull request #890 from bginsbach/add-pkg_infoMichael Boelen
Add pkg_info
2020-03-31Merge pull request #888 from bginsbach/fix-auth-9230Michael Boelen
Fix AUTH-9230 for systems without /etc/login.defs
2020-03-30Fix PKGS-7301 message nitBrian Ginsbach
The comment is correct. It is FreeBSD pkg not NetBSD pkg.
2020-03-30Add pkg_info to PackageIsInstalledBrian Ginsbach
The `pkg_info` command is used on a system using NetBSD pkgsrc to determine which packages are installed.
2020-03-30Add NetBSD pkgsrc pkg_info to known binariesBrian Ginsbach
The NetBSD pkgsrc package management system uses pkg_info for determining information about packages. This is also the command used in PKGS-7302.
2020-03-30PROC-3802 Only check for prelink package on LinuxBrian Ginsbach
The prelink package is Linux specific no need to check for it on non-Linux systems.
2020-03-29Fix AUTH-9230 for systems without /etc/login.defsBrian Ginsbach
This fixes a bug where it was determined that /etc/login.defs didn't exist as a prerequisite but then wasn't used to skip the test. Prevents warnings from `grep(1)` for "no such file or directory".
2020-03-29AUTH-9229 Do not use long options for sortBrian Ginsbach
Use the standard `sort(1)` short option `-u` rather than `--unique`, since not all versions support long options.
2020-03-28Adding test FILE-6394Sander
2020-03-27Check if system uses encrypted swap devicesTopi Miettinen
Add test CRYP-7931 to check if the system uses any encrypted swap devices. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-03-25[FINT-4339] define what file to check forMichael Boelen
2020-03-25Corrected requirements to run testsMichael Boelen
2020-03-25Added notes to NETW-3200 for future extending this testMichael Boelen