tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated log

This commit is contained in:
Michael Boelen 2016-05-12 06:24:45 +02:00
parent 9ba99711d6
commit 321bd5abc1
1 changed files with 19 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
CHANGELOG
View File

@ -43,12 +43,14 @@ new custom.prf.
* Ansible * Ansible
------- -------
Ansible examples on https://github.com/CISOfy/lynis-ansible Ansible examples for deployment are now on https://github.com/CISOfy/lynis-ansible
* Databases * Databases
----------- -----------
Lynis will check also for DB2 instances and report the status. Lynis will check also for DB2 instances and report the status.
* Developer Mode * Developer Mode
---------------- ----------------
With this release the developer mode is introduced. It can be activated with the With this release the developer mode is introduced. It can be activated with the
@ -72,10 +74,19 @@ This helper will show help, or values (e.g. version, plugin directories, etc).
Some examples include: lynis show options, lynis show commands, lynis show Some examples include: lynis show options, lynis show commands, lynis show
version, etc. See lynis show for all available details. version, etc. See lynis show for all available details.
* File Systems
--------------
The XFS file system detection has been added. Mount points /dev/shm and /var/tmp
are now checked for their options. Comparison of the mount options has been
improved. A new test has been added to check if /var/tmp has been bound to /tmp.
* Mac OS X improvements * Mac OS X improvements
----------------------- -----------------------
Package manager Brew has been added Package manager Brew has been added
* nginx * nginx
------- -------
Show suggestion when weak protocol is used, like SSLv2 or SSLv3. The protocols Show suggestion when weak protocol is used, like SSLv2 or SSLv3. The protocols
@ -95,6 +106,7 @@ Priority: 1) argument, 2) profile, 3) default
--plugindir is now an alias for --plugin-dir --plugindir is now an alias for --plugin-dir
* Profiles * Profiles
---------- ----------
Lynis now support multiple profiles. By using a file 'custom.prf', it allows to Lynis now support multiple profiles. By using a file 'custom.prf', it allows to
@ -114,16 +126,18 @@ The configuration of SSH is now parsed from the SSH daemon directly. This enable
handling with new defaults more easily, as OpenSSH sometimes introduces new keys, handling with new defaults more easily, as OpenSSH sometimes introduces new keys,
or change their default value between versions. or change their default value between versions.
* Systemd * Systemd
--------- ---------
Added support for detecting systemd and reporting it as a service manager. Added support for detecting systemd and reporting it as a service manager. The
systemd plugin has been released as a community plugin.
The systemd plugin has been released as a community plugin.
* Uploads * Uploads
--------- ---------
Solved a bug which added the proxy configuration twice. Solved a bug which added the proxy configuration twice.
* General improvements * General improvements
---------------------- ----------------------
The screen output has been improved, to show more meaningful things when some The screen output has been improved, to show more meaningful things when some
@ -181,6 +195,8 @@ Remove --config option, use lynis show profiles instead
[DBS-1860] Check for status of DB2 [DBS-1860] Check for status of DB2
[CRYP-7902] Support for multiple profiles, improved logging [CRYP-7902] Support for multiple profiles, improved logging
[FILE-6372] Properly checking for /etc/fstab now, ignore comments [FILE-6372] Properly checking for /etc/fstab now, ignore comments
[FILE-6374] Added /dev/shm and /var/tmp
[FILE-6374] New test for /var/tmp
[FILE-7524] Support for multiple profiles [FILE-7524] Support for multiple profiles
[HTTP-6710] Trigger suggestion when weak protocols SSLv2/SSLv3 are used [HTTP-6710] Trigger suggestion when weak protocols SSLv2/SSLv3 are used
[KRNL-5788] Support for kernel with grsecurity patches (linux-image-grsec) [KRNL-5788] Support for kernel with grsecurity patches (linux-image-grsec)