2015-09-10 21:05:04 +02:00
|
|
|
#!/bin/sh
|
|
|
|
|
|
|
|
|
|
#################################################################################
|
|
|
|
|
#
|
|
|
|
|
# Lynis
|
|
|
|
|
# ------------------
|
|
|
|
|
#
|
2016-03-13 16:00:39 +01:00
|
|
|
# Copyright 2007-2013, Michael Boelen
|
2019-01-31 14:47:35 +01:00
|
|
|
# Copyright 2007-2019, CISOfy
|
2016-03-13 16:00:39 +01:00
|
|
|
#
|
|
|
|
|
# Website : https://cisofy.com
|
|
|
|
|
# Blog : http://linux-audit.com
|
|
|
|
|
# GitHub : https://github.com/CISOfy/lynis
|
2015-09-10 21:05:04 +02:00
|
|
|
#
|
|
|
|
|
# Lynis comes with ABSOLUTELY NO WARRANTY. This is free software, and you are
|
|
|
|
|
# welcome to redistribute it under the terms of the GNU General Public License.
|
|
|
|
|
# See LICENSE file for usage of this software.
|
|
|
|
|
#
|
|
|
|
|
#################################################################################
|
|
|
|
|
#
|
|
|
|
|
# Hints and Tips
|
|
|
|
|
#
|
|
|
|
|
#################################################################################
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
# Only show tips when enabled
|
|
|
|
|
if [ ${SHOW_TOOL_TIPS} -eq 1 ]; then
|
|
|
|
|
|
2019-03-14 12:30:37 +01:00
|
|
|
# * Regular security auditing
|
|
|
|
|
#
|
|
|
|
|
# If package is installed, then suggest users to schedule the audit daily
|
|
|
|
|
# How: confirm presence of directory /etc/lynis and check cronjobs
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# * Check for duplicate items between default and custom profile
|
|
|
|
|
#
|
|
|
|
|
# This can be done by marking an item if it overwrites the default profile
|
|
|
|
|
# with the same value.
|
|
|
|
|
#
|
|
|
|
|
# Rationale: default profile should contain have sensible default and
|
|
|
|
|
# custom profile allows customization for the user or system.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Suggest usage of plugins if none are enabled
|
|
|
|
|
|
|
|
|
|
|
2015-09-10 21:05:04 +02:00
|
|
|
# Bash completion support
|
2019-03-14 12:30:37 +01:00
|
|
|
#
|
|
|
|
|
# Detect if bash is used for active user
|
|
|
|
|
#if [ ! -z "${ETC_PATHS}" ]; then
|
|
|
|
|
# for I in ${ETC_PATHS}; do
|
|
|
|
|
# if [ -d ${I}/bash_completion.d ]; then
|
|
|
|
|
# if [ ! -f ${ETC_PATHS}/bash_completion.d/lynis ]; then
|
|
|
|
|
# Display "This system has a bash_completion directory. Copy extras/bash_completion.d/lynis to ${I} to get completion support for Lynis"
|
|
|
|
|
# fi
|
|
|
|
|
# fi
|
|
|
|
|
# done
|
|
|
|
|
#fi
|
2015-09-10 21:05:04 +02:00
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
|
#================================================================================
|
2016-03-13 16:03:46 +01:00
|
|
|
# Lynis - Security Auditing and System Hardening for Linux and UNIX - https://cisofy.com
|
