tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-04-08 17:15:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #674 from Capashenn/patch_6

Browse Source 
Add some default permfile/permdir
This commit is contained in:
Michael Boelen 2019-07-03 15:10:46 +02:00 committed by GitHub
commit 95cc811f79
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 27 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
default.prf
View File

@ -332,7 +332,28 @@ openldap:slapd.conf:owner:ldap-root:
#permfile:/etc/inetd.conf:rw-------:root:-:WARN:
#permfile:/etc/fstab:rw-r--r--:root:-:WARN:
permfile:/etc/lilo.conf:rw-------:root:-:WARN:
permfile:/boot/grub2/grub.cfg:rw-------:root:root:WARN:
permfile:/boot/grub/grub.cfg:rw-------:root:root:WARN:
permfile:/boot/grub2/user.cfg:rw-------:root:root:WARN:
permfile:/etc/motd:rw-r--r--:root:root:WARN:
permfile:/etc/issue:rw-r--r--:root:root:WARN:
permfile:/etc/issue.net:rw-r--r--:root:root:WARN:
permfile:/etc/hosts.allow:rw-r--r--:root:root:WARN:
permfile:/etc/hosts.deny:rw-r--r--:root:root:WARN:
permfile:/etc/crontab:rw-------:root:-:WARN:
permfile:/etc/cron.allow:rw-------:root:-:WARN:
permfile:/etc/cron.deny:rw-------:root:-:WARN:
permfile:/etc/at.allow:rw-------:root:-:WARN:
permfile:/etc/at.deny:rw-------:root:-:WARN:
permfile:/etc/ssh/sshd_config:rw-------:root:-:WARN:
permfile:/etc/passwd:rw-r--r--:root:-:WARN:
permfile:/etc/shadow:---------:root:-:WARN:
permfile:/etc/group:rw-r--r--:root:-:WARN:
permfile:/etc/gshadow:---------:root:-:WARN:
permfile:/etc/passwd-:rw-r--r--:root:-:WARN:
permfile:/etc/shadow-:---------:root:-:WARN:
permfile:/etc/group-:rw-r--r--:root:-:WARN:
permfile:/etc/gshadow-:---------:root:-:WARN:
#################################################################################
#
@ -343,6 +364,11 @@ permfile:/etc/lilo.conf:rw-------:root:-:WARN:
#################################################################################
permdir:/root/.ssh:rwx------:root:-:WARN:
permdir:/etc/cron.hourly:rwx------:root:root:WARN:
permdir:/etc/cron.daily:rwx------:root:root:WARN:
permdir:/etc/cron.weekly:rwx------:root:root:WARN:
permdir:/etc/cron.monthly:rwx------:root:root:WARN:
permdir:/etc/cron.d:rwx------:root:root:WARN:
# Scan for a program/binary in BINPATHs
#scanbinary:Rootkit Hunter:rkhunter: