mirror of https://github.com/CISOfy/lynis.git
Propose fix some typos (#538)
This commit is contained in:
parent
7e0b300e27
commit
c5dcbe8c31
4
FAQ
4
FAQ
|
@ -27,7 +27,7 @@
|
|||
|
||||
Q: I can't find any configuration file for Lynis, where is it?
|
||||
A: Lynis uses profiles. They are similar to a configuration file and determine
|
||||
how a security scan should be performed.
|
||||
how a security scan should be performed.
|
||||
|
||||
Q: My version is outdated, what can I do to upgrade?
|
||||
Check out the upgrade guide: https://cisofy.com/documentation/lynis/upgrading/
|
||||
|
@ -82,7 +82,7 @@
|
|||
Q: The program takes long to complete and also uses too much resources. Can it
|
||||
be tuned?
|
||||
A: The time it takes to complete depends on the amount of tests to run.
|
||||
However the resources it take can be slighty lowered by increasing the
|
||||
However the resources it take can be slightly lowered by increasing the
|
||||
pause_between_tests profile option. Keep in mind this increases the total
|
||||
length of the scan to complete.
|
||||
|
||||
|
|
|
@ -347,7 +347,7 @@ SQD-3616:test:security:squid::Check external Squid authentication:
|
|||
SQD-3620:test:security:squid::Check Squid access control lists:
|
||||
SQD-3624:test:security:squid::Check Squid safe ports:
|
||||
SQD-3630:test:security:squid::Check Squid reply_body_max_size option:
|
||||
SQD-3680:test:security:squid::Check Squid version suppresion:
|
||||
SQD-3680:test:security:squid::Check Squid version suppression:
|
||||
SSH-7402:test:security:ssh::Check for running SSH daemon:
|
||||
SSH-7404:test:security:ssh::Check SSH daemon file location:
|
||||
SSH-7408:test:security:ssh::Check SSH specific defined options:
|
||||
|
|
|
@ -14,7 +14,7 @@
|
|||
#
|
||||
# Options:
|
||||
|
||||
echo "[*] Activity [V] Succesful [X] Error [=] Result"
|
||||
echo "[*] Activity [V] Successful [X] Error [=] Result"
|
||||
echo ""
|
||||
|
||||
# Umask used when creating files/directories
|
||||
|
@ -227,7 +227,7 @@
|
|||
|
||||
RPMFILE="${RPMWORKDIR}/RPMS/noarch/lynis-${LYNIS_VERSION}-1.noarch.rpm"
|
||||
if [ -f ${RPMFILE} ]; then
|
||||
echo "[V] Building RPM succesful!"
|
||||
echo "[V] Building RPM successful!"
|
||||
else
|
||||
echo "[X] Could not find RPM file, most likely failed"
|
||||
echo " Expected: ${RPMFILE}"
|
||||
|
|
|
@ -2207,7 +2207,7 @@
|
|||
if [ ${SKIPTEST} -eq 0 -a ! -z "${TEST_NEED_PLATFORM}" -a ! "${HARDWARE}" = "${TEST_NEED_PLATFORM}" ]; then SKIPTEST=1; SKIPREASON="Incorrect hardware platform"; fi
|
||||
|
||||
# Not all prerequisites met, like missing tool
|
||||
if [ ${SKIPTEST} -eq 0 -a "${PREQS_MET}" = "NO" ]; then SKIPTEST=1; if [ -z "${SKIPREASON}" ]; then SKIPREASON="Prerequisities not met (ie missing tool, other type of Linux distribution)"; fi; fi
|
||||
if [ ${SKIPTEST} -eq 0 -a "${PREQS_MET}" = "NO" ]; then SKIPTEST=1; if [ -z "${SKIPREASON}" ]; then SKIPREASON="Prerequisites not met (ie missing tool, other type of Linux distribution)"; fi; fi
|
||||
|
||||
# Skip if a test is root only and we are running a non-privileged test
|
||||
if [ ${SKIPTEST} -eq 0 -a ${ROOT_ONLY} -eq 1 -a ! ${MYID} = "0" ]; then
|
||||
|
|
|
@ -305,7 +305,7 @@
|
|||
#
|
||||
# Test : LOGG-2152
|
||||
# Description : Check for Solaris 'loghost' entry in /etc/inet/hosts, or
|
||||
# succesful resolving via DNS or any other name service.
|
||||
# successful resolving via DNS or any other name service.
|
||||
Register --test-no LOGG-2152 --weight L --os Solaris --network NO --category security --description "Checking loghost"
|
||||
if [ ${SKIPTEST} -eq 0 ]; then
|
||||
# Try local hosts file
|
||||
|
@ -322,7 +322,7 @@
|
|||
FIND=$(getent hosts loghost | ${GREPBINARY} loghost)
|
||||
if [ ! -z "${FIND}" ]; then
|
||||
SOLARIS_LOGHOST_FOUND=1
|
||||
LogText "Result: name resolving was succesful"
|
||||
LogText "Result: name resolving was successful"
|
||||
LogText "Output: ${FIND}"
|
||||
else
|
||||
LogText "Result: name resolving didn't find results"
|
||||
|
|
|
@ -302,7 +302,7 @@
|
|||
# Test : SQD-3680
|
||||
# Description : Check httpd_suppress_version_string
|
||||
if [ ${SQUID_DAEMON_RUNNING} -eq 1 -a ! -z "${SQUID_DAEMON_CONFIG}" ]; then PREQS_MET="YES"; else PREQS_MET="NO"; fi
|
||||
Register --test-no SQD-3680 --preqs-met ${PREQS_MET} --weight L --network NO --category security --description "Check Squid version suppresion"
|
||||
Register --test-no SQD-3680 --preqs-met ${PREQS_MET} --weight L --network NO --category security --description "Check Squid version suppression"
|
||||
if [ ${SKIPTEST} -eq 0 ]; then
|
||||
FIND=$(${GREPBINARY} "^httpd_suppress_version_string " ${SQUID_DAEMON_CONFIG} | ${GREPBINARY} " on")
|
||||
if [ -z "${FIND}" ]; then
|
||||
|
|
|
@ -360,10 +360,10 @@
|
|||
FIND=$(${NTPQBINARY} -p -n | ${EGREPBINARY} '^x')
|
||||
if [ -z "${FIND}" ]; then
|
||||
Display --indent 2 --text "- Checking falsetickers" --result "${STATUS_OK}" --color GREEN
|
||||
LogText "Result: No falsetickers found (items preceeding with an 'x')"
|
||||
LogText "Result: No falsetickers found (items preceding with an 'x')"
|
||||
else
|
||||
Display --indent 2 --text "- Checking falsetickers" --result "${STATUS_NONE}" --color YELLOW
|
||||
LogText "Result: Found one or more falsetickers (items preceeding with an 'x')"
|
||||
LogText "Result: Found one or more falsetickers (items preceding with an 'x')"
|
||||
for I in ${FIND}; do
|
||||
I=$(echo ${I} | ${SEDBINARY} 's/x//g')
|
||||
LogText "Falseticker found: ${I}"
|
||||
|
|
Loading…
Reference in New Issue