tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-30 17:24:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

Improve markdown display

Browse Source
This commit is contained in:
Michael Boelen 2016-05-14 16:58:25 +02:00
parent 89d7da4ced
commit b6017e4860
1 changed files with 51 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

96
CHANGELOG.md
View File

@ -76,7 +76,7 @@ are now checked for their options. Comparison of the mount options has been
improved. A new test has been added to check if /var/tmp has been bound to /tmp. improved. A new test has been added to check if /var/tmp has been bound to /tmp.
Mac OS X improvements Mac OS X Improvements
--------------------- ---------------------
Package manager Brew has been added Package manager Brew has been added
@ -139,7 +139,7 @@ Uploads
Solved a bug which added the proxy configuration twice. Solved a bug which added the proxy configuration twice.
General improvements General Improvements
-------------------- --------------------
The screen output has been improved, to show more meaningful things when some The screen output has been improved, to show more meaningful things when some
parameters are missing. Several old variables and lines have been cleaned up. parameters are missing. Several old variables and lines have been cleaned up.
@ -162,57 +162,63 @@ when old functions are still be used. Later on these functions will be deleted,
and therefore placed at the bottom. and therefore placed at the bottom.
Program options Program Options
--------------- ---------------
Added --developer option to enable developer mode
Added --verbose to show more details on screen and reducing in normal mode == Added
Added --show-warnings-only to just show any warnings on screen --developer Enable developer mode
Added --skip-plugins to disable running any plugins (alias: --no-plugins) --verbose Show more details on screen, reduce in normal mode
Changed --quiet to really quiet --show-warnings-only Only show warnings on screen
Remove --config option, use lynis show profiles instead --skip-plugins Disable running any plugins (alias: --no-plugins)
== Changed
--quiet Become really quiet
== Removed
--config Use 'lynis show profiles' instead
Functions Functions
----------- ---------
[ContainsString] New function to search for a string in another one * ContainsString New function to search for a string in another one
[Display] Added --debug, showing details on screen in debug mode * Display Added --debug, showing details on screen in debug mode
[IsDebug] Check for usage of --debug * IsDebug Check for usage of --debug
[IsDeveloperMode] Status for development and debugging (--developer) * IsDeveloperMode Status for development and debugging (--developer)
[IsRunning] Added return state * IsRunning Added return state
[IsVerbose] Check for usage of --verbose * IsVerbose Check for usage of --verbose
[IsOwnedByRoot] Check ownership of files and directories * IsOwnedByRoot Check ownership of files and directories
[IsWorldWritable] Improved test with additional details * IsWorldWritable Improved test with additional details
[PortIsListening] Check if a service it listening to a specified port * PortIsListening Check if a service it listening to a specified port
[SkipAtomicTest] Allow smaller tests to be skipped (e.g. SSH-7408) * SkipAtomicTest Allow smaller tests to be skipped (e.g. SSH-7408)
Tests Tests
----- -----
[AUTH-9262] Restructure of test, support for pwquality PAM * AUTH-9262 Restructure of test, support for pwquality PAM
[AUTH-9308] Check for systemd targets * AUTH-9308 Check for systemd targets
[BANN-7119] /etc/motd test disabled * BANN-7119 /etc/motd test disabled
[BANN-7122] /etc/motd content test disabled * BANN-7122 /motd content test disabled
[BOOT-5184] Improve file permissions check for CentOS 7 machines * BOOT-5184 Improve file permissions check for CentOS 7 machines
[DBS-1860] Check for status of DB2 * DBS-1860 Check for status of DB2
[CRYP-7902] Support for multiple profiles, improved logging * CRYP-7902 Support for multiple profiles, improved logging
[FILE-6372] Properly checking for /etc/fstab now, ignore comments * FILE-6372 Properly checking for /etc/fstab now, ignore comments
[FILE-6374] Added /dev/shm and /var/tmp * FILE-6374 Added /dev/shm and /var/tmp
[FILE-6374] New test for /var/tmp * FILE-6374 New test for /var/tmp
[FILE-7524] Support for multiple profiles * FILE-7524 Support for multiple profiles
[HTTP-6710] Trigger suggestion when weak protocols SSLv2/SSLv3 are used * HTTP-6710 Trigger suggestion when weak protocols SSLv2/SSLv3 are used
[KRNL-5788] Support for kernel with grsecurity patches (linux-image-grsec) * KRNL-5788 Support for kernel with grsecurity patches (linux-image-grsec)
[KRNL-5820] Improved logging for test * KRNL-5820 Improved logging for test
[KRNL-6000] Allow multiple profiles to be used, store more details * KRNL-6000 Allow multiple profiles to be used, store more details
[LOGG-2190] Improvements for Fail2Ban and cron-related files * LOGG-2190 Improvements for Fail2Ban and cron-related files
[NETW-3014] Support for multiple profiles * NETW-3014 Support for multiple profiles
[PKGS-7303] Added Brew package manager * PKGS-7303 Added Brew package manager
[PKGS-7354] Test for DNF repoquery plugin before using it * PKGS-7354 Test for DNF repoquery plugin before using it
[PKGS-7381] Check for vuln.xml file * PKGS-7381 Check for vuln.xml file
[PROC-3612] Removed wchan output to prevent grsecurity issues * PROC-3612 Removed wchan output to prevent grsecurity issues
[SCHD-7702] Test for running cron daemon * SCHD-7702 Test for running cron daemon
[SCHD-7704] Test ownership of cronjob files * SCHD-7704 Test ownership of cronjob files
[TOOL-5102] Test for Fail2ban tooling * TOOL-5102 Test for Fail2ban tooling
[TOOL-5190] Test for intrusion detection or prevention system * TOOL-5190 Test for intrusion detection or prevention system
-------------------------------------------------------------- --------------------------------------------------------------