tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Improve markdown display

This commit is contained in:
Michael Boelen 2016-05-14 16:58:25 +02:00
parent 89d7da4ced
commit b6017e4860
1 changed files with 51 additions and 45 deletions

96
CHANGELOG.md
View File

@ -76,7 +76,7 @@ are now checked for their options. Comparison of the mount options has been
improved. A new test has been added to check if /var/tmp has been bound to /tmp.
Mac OS X improvements
Mac OS X Improvements
---------------------
Package manager Brew has been added
@ -139,7 +139,7 @@ Uploads
Solved a bug which added the proxy configuration twice.
General improvements
General Improvements
--------------------
The screen output has been improved, to show more meaningful things when some
parameters are missing. Several old variables and lines have been cleaned up.
@ -162,57 +162,63 @@ when old functions are still be used. Later on these functions will be deleted,
and therefore placed at the bottom.
Program options
Program Options
---------------
Added --developer option to enable developer mode
Added --verbose to show more details on screen and reducing in normal mode
Added --show-warnings-only to just show any warnings on screen
Added --skip-plugins to disable running any plugins (alias: --no-plugins)
Changed --quiet to really quiet
Remove --config option, use lynis show profiles instead
== Added
--developer Enable developer mode
--verbose Show more details on screen, reduce in normal mode
--show-warnings-only Only show warnings on screen
--skip-plugins Disable running any plugins (alias: --no-plugins)
== Changed
--quiet Become really quiet
== Removed
--config Use 'lynis show profiles' instead
Functions
-----------
[ContainsString] New function to search for a string in another one
[Display] Added --debug, showing details on screen in debug mode
[IsDebug] Check for usage of --debug
[IsDeveloperMode] Status for development and debugging (--developer)
[IsRunning] Added return state
[IsVerbose] Check for usage of --verbose
[IsOwnedByRoot] Check ownership of files and directories
[IsWorldWritable] Improved test with additional details
[PortIsListening] Check if a service it listening to a specified port
[SkipAtomicTest] Allow smaller tests to be skipped (e.g. SSH-7408)
---------
* ContainsString New function to search for a string in another one
* Display Added --debug, showing details on screen in debug mode
* IsDebug Check for usage of --debug
* IsDeveloperMode Status for development and debugging (--developer)
* IsRunning Added return state
* IsVerbose Check for usage of --verbose
* IsOwnedByRoot Check ownership of files and directories
* IsWorldWritable Improved test with additional details
* PortIsListening Check if a service it listening to a specified port
* SkipAtomicTest Allow smaller tests to be skipped (e.g. SSH-7408)
Tests
-----
[AUTH-9262] Restructure of test, support for pwquality PAM
[AUTH-9308] Check for systemd targets
[BANN-7119] /etc/motd test disabled
[BANN-7122] /etc/motd content test disabled
[BOOT-5184] Improve file permissions check for CentOS 7 machines
[DBS-1860] Check for status of DB2
[CRYP-7902] Support for multiple profiles, improved logging
[FILE-6372] Properly checking for /etc/fstab now, ignore comments
[FILE-6374] Added /dev/shm and /var/tmp
[FILE-6374] New test for /var/tmp
[FILE-7524] Support for multiple profiles
[HTTP-6710] Trigger suggestion when weak protocols SSLv2/SSLv3 are used
[KRNL-5788] Support for kernel with grsecurity patches (linux-image-grsec)
[KRNL-5820] Improved logging for test
[KRNL-6000] Allow multiple profiles to be used, store more details
[LOGG-2190] Improvements for Fail2Ban and cron-related files
[NETW-3014] Support for multiple profiles
[PKGS-7303] Added Brew package manager
[PKGS-7354] Test for DNF repoquery plugin before using it
[PKGS-7381] Check for vuln.xml file
[PROC-3612] Removed wchan output to prevent grsecurity issues
[SCHD-7702] Test for running cron daemon
[SCHD-7704] Test ownership of cronjob files
[TOOL-5102] Test for Fail2ban tooling
[TOOL-5190] Test for intrusion detection or prevention system
* AUTH-9262 Restructure of test, support for pwquality PAM
* AUTH-9308 Check for systemd targets
* BANN-7119 /etc/motd test disabled
* BANN-7122 /motd content test disabled
* BOOT-5184 Improve file permissions check for CentOS 7 machines
* DBS-1860 Check for status of DB2
* CRYP-7902 Support for multiple profiles, improved logging
* FILE-6372 Properly checking for /etc/fstab now, ignore comments
* FILE-6374 Added /dev/shm and /var/tmp
* FILE-6374 New test for /var/tmp
* FILE-7524 Support for multiple profiles
* HTTP-6710 Trigger suggestion when weak protocols SSLv2/SSLv3 are used
* KRNL-5788 Support for kernel with grsecurity patches (linux-image-grsec)
* KRNL-5820 Improved logging for test
* KRNL-6000 Allow multiple profiles to be used, store more details
* LOGG-2190 Improvements for Fail2Ban and cron-related files
* NETW-3014 Support for multiple profiles
* PKGS-7303 Added Brew package manager
* PKGS-7354 Test for DNF repoquery plugin before using it
* PKGS-7381 Check for vuln.xml file
* PROC-3612 Removed wchan output to prevent grsecurity issues
* SCHD-7702 Test for running cron daemon
* SCHD-7704 Test ownership of cronjob files
* TOOL-5102 Test for Fail2ban tooling
* TOOL-5190 Test for intrusion detection or prevention system
--------------------------------------------------------------