tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated log

This commit is contained in:
mboelen 2014-10-14 10:06:08 +02:00
parent 3340e305c9
commit ae0dcdfcfd
1 changed files with 23 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
CHANGELOG
View File

@ -8,7 +8,6 @@
Author: Michael Boelen (michael.boelen@cisofy.com) Author: Michael Boelen (michael.boelen@cisofy.com)
Description: Security and system auditing tool Description: Security and system auditing tool
Website: http://cisofy.com/lynis/ Website: http://cisofy.com/lynis/
http://www.rootkit.nl/projects/lynis.html
Support policy: See section 'Support' (README file); Support policy: See section 'Support' (README file);
Commercial support and plugins available via CISOfy Commercial support and plugins available via CISOfy
@ -18,23 +17,28 @@
================================================================================ ================================================================================
* 1.6.3 (2014-xx-xx) * 1.6.3 (2014-10-14)
New: New:
- Running Lynis without root permissions will start non-privileged scan
- Added new test to determine if Snoopy is used [ACCT-9636]
- Gentoo package listing [PKGS-7304]
- Gentoo vulnerable packages test [PKGS-7393]
- Test for GRUB boot loader password [BOOT-5122]
- Added grub2-install to binaries
- Added ClamXav for Mac OS X [MALW-3288]
- Systemd service and timer example file added
- Added tests for Shellshock bash vulnerability [SHLL-6290] - Added tests for Shellshock bash vulnerability [SHLL-6290]
- Added test to determine if Snoopy is used [ACCT-9636]
- New test for qdaemon configuration file [PRNT-2416]
- Test for GRUB boot loader password [BOOT-5122]
- New test for qdaemon printer jobs [PRNT-2420]
- Added ClamXav test for Mac OS X [MALW-3288]
- Gentoo vulnerable packages test [PKGS-7393]
- New test for qdaemon status [PRNT-2418]
- Gentoo package listing [PKGS-7304]
- Running Lynis without root permissions will start non-privileged scan
- Systemd service and timer example file added
- Added grub2-install to binaries
Changes: Changes:
- Adjustments so insecure SSL protocols are detected in nginx config [HTTP-6710] - Adjustments so insecure SSL protocols are detected in nginx config [HTTP-6710]
- Directories will be skipped when searching for nginx log files [HTTP-6720]
- Only gather unique name servers from /etc/resolv.conf [NAME-2704] - Only gather unique name servers from /etc/resolv.conf [NAME-2704]
- Properly detect mod_evasive on Gentoo and others [HTTP-6640] - Properly detect mod_evasive on Gentoo and others [HTTP-6640]
- Improved swap partition detection in /etc/fstab [FILE-6336]
- Improvements to kernel detection (e.g. Gentoo) [KRNL-5830] - Improvements to kernel detection (e.g. Gentoo) [KRNL-5830]
- Test for built-in security options in YUM [PKGS-7386] - Test for built-in security options in YUM [PKGS-7386]
- Improved boot loader detection for GRUB2 [BOOT-5121] - Improved boot loader detection for GRUB2 [BOOT-5121]
@ -45,7 +49,6 @@
- Minor adjustments to log output - Minor adjustments to log output
- Renamed dev directory to extras - Renamed dev directory to extras
-- --
* 1.6.2 (2014-09-22) * 1.6.2 (2014-09-22)
@ -1328,13 +1331,13 @@
-- --
* 1.1.1 (2008-04-13) * 1.1.1 (2008-04-13)
New: New:
- Added Solaris package manager (pkginfo) to obtain installed packages - Added Solaris package manager (pkginfo) to obtain installed packages
- Added new option to profile to whitelist promiscuous interfaces (if_promisc) - Added new option to profile to whitelist promiscuous interfaces (if_promisc)
- Added vulnerable packages check for Debian/Ubuntu - Added vulnerable packages check for Debian/Ubuntu
- Added package database consistency check for Debian/Ubuntu - Added package database consistency check for Debian/Ubuntu
Changes: Changes:
- Only perform boot.conf check for OpenBSD when running on i386 - Only perform boot.conf check for OpenBSD when running on i386
- Changed RemovePIDFile to prevent incorrect file presence check (ie on OpenBSD) - Changed RemovePIDFile to prevent incorrect file presence check (ie on OpenBSD)
@ -1342,13 +1345,13 @@
- Improved text alignment (display) and logging - Improved text alignment (display) and logging
- Commented out some of the default profile options - Commented out some of the default profile options
- Updated FAQ, readme, man page - Updated FAQ, readme, man page
Bug fixes: Bug fixes:
- Added missing space at OS detection function - Added missing space at OS detection function
- Fixed /etc/group tests to ignore commented lines - Fixed /etc/group tests to ignore commented lines
- Fixed sticky bit checking on /tmp, so it won't give incorrect results on - Fixed sticky bit checking on /tmp, so it won't give incorrect results on
SuSE/Debian systems SuSE/Debian systems
-- --
* 1.1.0 (2008-04-09) * 1.1.0 (2008-04-09)
@ -1399,7 +1402,7 @@
- Extended FreeBSD (Copyright file) test - Extended FreeBSD (Copyright file) test
- Changed indentation for many tests - Changed indentation for many tests
- Changed some typos in notice/warning messages - Changed some typos in notice/warning messages
-- --
* 1.0.7 (2008-01-28) * 1.0.7 (2008-01-28)
@ -1606,14 +1609,14 @@
- Created project page at website - Created project page at website
- Added documentation (README), ToDo list (TODO) - Added documentation (README), ToDo list (TODO)
- Man page lynis(8) - Man page lynis(8)
Changes: Changes:
- No changes - No changes
Bugfixes: Bugfixes:
- No bugfixes - No bugfixes
================================================================================ ================================================================================
Lynis - Copyright 2007-2013, Michael Boelen - The Netherlands Lynis - Copyright 2007-2014, CISOfy, Michael Boelen - The Netherlands
http://www.rootkit.nl