tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-28 08:14:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

Move to change log with markdown syntax

Browse Source
This commit is contained in:
Michael Boelen 2016-05-14 16:17:19 +02:00
parent e8639f1d9a
commit 89d7da4ced
1 changed files with 55 additions and 54 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

109
CHANGELOG → CHANGELOG.md
View File

@ -1,26 +1,11 @@
Lynis Changelog
===============
================================================================================ Lynis 2.2.1 (not released, development version)
-----------------------------------------------
Lynis - Changelog Upgrade tips
============
================================================================================
Author: Michael Boelen (2007-2013)
CISOfy (2013-2016)
Description: Security and system auditing tool
Website: https://cisofy.com/lynis/
GitHub: https://github.com/CISOfy/lynis
Support policy: See section 'Support' in README file
Commercial support and plugins available via CISOfy
Documentation: See web site, README, FAQ and CHANGELOG file
================================================================================
= Lynis 2.2.1 (not released, development version) =
* Upgrade tips
Several changes have been made to core functions of Lynis. These are to simplify Several changes have been made to core functions of Lynis. These are to simplify
its usage, but might cause differences after upgrading. See the tips below to its usage, but might cause differences after upgrading. See the tips below to
@ -40,19 +25,23 @@ error-on-warnings=yes (custom.prf) to exit with code 78 warnings.
Do not define a profile with --profile. Instead, put only your changes in the Do not define a profile with --profile. Instead, put only your changes in the
new custom.prf. new custom.prf.
---
* Ansible Details
=======
Ansible
------- -------
Ansible examples for deployment are now on https://github.com/CISOfy/lynis-ansible New Ansible examples for deployment: https://github.com/CISOfy/lynis-ansible
* Databases Databases
----------- ---------
Lynis will check also for DB2 instances and report the status. Lynis will check also for DB2 instances and report the status.
* Developer Mode Developer Mode
---------------- --------------
With this release the developer mode is introduced. It can be activated with the With this release the developer mode is introduced. It can be activated with the
--developer option, or developer-mode=yes in profile. In development mode, some --developer option, or developer-mode=yes in profile. In development mode, some
details are displayed on screen, to help testing of existing or new tests. details are displayed on screen, to help testing of existing or new tests.
@ -63,9 +52,14 @@ Examples:
lynis audit system --profile developer.prf lynis audit system --profile developer.prf
lynis audit system --developer lynis audit system --developer
A new software development kit (SDK) for Lynis is available on GitHub. This will
help contributors and developers to test software quality, including linting and
running unit tests. The devkit also supports building DEB and RPM files for easy
deployment. The repository can be found on https://github.com/CISOfy/lynis-sdk
* Documentation
--------------- Documentation
-------------
Template files have been updated to provide better examples on how to create Template files have been updated to provide better examples on how to create
custom tests and plugins. custom tests and plugins.
@ -75,40 +69,40 @@ Some examples include: lynis show options, lynis show commands, lynis show
version, etc. See lynis show for all available details. version, etc. See lynis show for all available details.
* File Systems File Systems
-------------- ------------
The XFS file system detection has been added. Mount points /dev/shm and /var/tmp The XFS file system detection has been added. Mount points /dev/shm and /var/tmp
are now checked for their options. Comparison of the mount options has been are now checked for their options. Comparison of the mount options has been
improved. A new test has been added to check if /var/tmp has been bound to /tmp. improved. A new test has been added to check if /var/tmp has been bound to /tmp.
* Mac OS X improvements Mac OS X improvements
----------------------- ---------------------
Package manager Brew has been added Package manager Brew has been added
* nginx nginx
------- -----
Show suggestion when weak protocol is used, like SSLv2 or SSLv3. The protocols Show suggestion when weak protocol is used, like SSLv2 or SSLv3. The protocols
are now also parsed and stored as details in the report file. are now also parsed and stored as details in the report file.
* Performance Performance
------------- -----------
Several performance improvements have been implemented. This includes rewriting Several performance improvements have been implemented. This includes rewriting
tests to invoke less commands and enhanced hardware detection at the beginning. tests to invoke less commands and enhanced hardware detection at the beginning.
* Plugins Plugins
--------- -------
You can set the plugin directory now also via a profile. First match wins. You can set the plugin directory now also via a profile. First match wins.
Priority: 1) argument, 2) profile, 3) default Priority: 1) argument, 2) profile, 3) default
--plugindir is now an alias for --plugin-dir --plugindir is now an alias for --plugin-dir
* Profiles Profiles
---------- --------
Lynis now support multiple profiles. By using a file 'custom.prf', it allows to Lynis now support multiple profiles. By using a file 'custom.prf', it allows to
inherit values first from default.prf, then merge it with custom.prf. inherit values first from default.prf, then merge it with custom.prf.
@ -120,26 +114,33 @@ New profile options:
check-value check-value
* SSH Remote scanning
----- ---------------
Although Lynis is a aimed on running on local hosts, there is still an ongoing
demand for running remote scans. With 'lynis audit system remote' tips are now
provides to perform such a scan via SSH.
SSH
---
The configuration of SSH is now parsed from the SSH daemon directly. This enables The configuration of SSH is now parsed from the SSH daemon directly. This enables
handling with new defaults more easily, as OpenSSH sometimes introduces new keys, handling with new defaults more easily, as OpenSSH sometimes introduces new keys,
or change their default value between versions. or change their default value between versions.
* Systemd Systemd
--------- -------
Added support for detecting systemd and reporting it as a service manager. The Added support for detecting systemd and reporting it as a service manager. The
systemd plugin has been released as a community plugin. systemd plugin has been released as a community plugin.
* Uploads Uploads
--------- -------
Solved a bug which added the proxy configuration twice. Solved a bug which added the proxy configuration twice.
* General improvements General improvements
---------------------- --------------------
The screen output has been improved, to show more meaningful things when some The screen output has been improved, to show more meaningful things when some
parameters are missing. Several old variables and lines have been cleaned up. parameters are missing. Several old variables and lines have been cleaned up.
@ -161,8 +162,8 @@ when old functions are still be used. Later on these functions will be deleted,
and therefore placed at the bottom. and therefore placed at the bottom.
* Program options Program options
----------------- ---------------
Added --developer option to enable developer mode Added --developer option to enable developer mode
Added --verbose to show more details on screen and reducing in normal mode Added --verbose to show more details on screen and reducing in normal mode
Added --show-warnings-only to just show any warnings on screen Added --show-warnings-only to just show any warnings on screen
@ -171,7 +172,7 @@ Changed --quiet to really quiet
Remove --config option, use lynis show profiles instead Remove --config option, use lynis show profiles instead
* Functions Functions
----------- -----------
[ContainsString] New function to search for a string in another one [ContainsString] New function to search for a string in another one
[Display] Added --debug, showing details on screen in debug mode [Display] Added --debug, showing details on screen in debug mode
@ -185,8 +186,8 @@ Remove --config option, use lynis show profiles instead
[SkipAtomicTest] Allow smaller tests to be skipped (e.g. SSH-7408) [SkipAtomicTest] Allow smaller tests to be skipped (e.g. SSH-7408)
* Tests Tests
------- -----
[AUTH-9262] Restructure of test, support for pwquality PAM [AUTH-9262] Restructure of test, support for pwquality PAM
[AUTH-9308] Check for systemd targets [AUTH-9308] Check for systemd targets
[BANN-7119] /etc/motd test disabled [BANN-7119] /etc/motd test disabled