tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-31 01:34:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

Updated log

Browse Source
This commit is contained in:
Michael Boelen 2019-07-07 18:51:49 +02:00
parent 5217db95b1
commit 9364baa4fa
No known key found for this signature in database
GPG Key ID: 26141F77A09D7F04
1 changed files with 15 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
CHANGELOG.md
View File

@ -4,24 +4,31 @@
This is a major release of Lynis and includes several big changes. This is a major release of Lynis and includes several big changes.
Some of these changes may break your current usage of the tool, so test before Some of these changes may break your current usage of the tool, so test before
deployment. deployment!
Breaking changes: Breaking changes:
- Some of the old and deprecated commands or switches are removed - Some commands or switches are removed
- Format of profile options changed (from key:value to key=value)
An important focus area for this release is on security. We added several An important focus area for this release is on security. We added several
measures to further tighten any possible misuse. measures to further tighten any possible misuse.
### Added ### Added
- Test PATH and warn or exit on discovery of dangerous location (security) - Security: test PATH and warn or exit on discovery of dangerous location
- Additional safeguard by testing if common system tools are available (security) - Security: additional safeguard by testing if common system tools are available
- Test parameters and arguments for presence of control characters (security) - Security: aest parameters and arguments for presence of control characters
- New function SafeInput (security) - Security: strict checking enabled, filtering out unexpected characters
- New option to disable a single plugin: disable-plugin=pluginname - New option: disable-plugin=pluginname - Disables a single plugin
- New function: Readonly (security)
- New function: SafeInput (security)
- New function: DisplayWarning
### Changed ### Changed
- The 'nounset' (set -u) parameter is now activated by default (security) - Profiles: unused options removed
- Profiles: message is displayed when old format "key:value" is used
- Security: the 'nounset' (set -u) parameter is now activated by default
- Use locations from PATH environment variable, unless it is empty - Use locations from PATH environment variable, unless it is empty
- Show 'lynis generate hostids' when they are missing
--------------------------------------------------------------------------------- ---------------------------------------------------------------------------------