tyler.durden/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2025-07-27 07:44:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'master' of https://github.com/CISOfy/lynis

Browse Source
This commit is contained in:
Michael Boelen 2016-10-26 12:54:59 +02:00
commit e54bae0c6d
4 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
default.prf
View File

@ -39,7 +39,7 @@ language=
# Lynis Enterprise license key # Lynis Enterprise license key
license-key= license-key=
# Defines the role of the system (desktop, server) # Defines the role of the system (personal, workstation or server)
machine-role=server machine-role=server
# Profile name, will be used as title/description # Profile name, will be used as title/description

4
include/profiles
View File

@ -174,10 +174,10 @@
LOG_INCORRECT_OS=${SETTING_LOG_TESTS_INCORRECT_OS} LOG_INCORRECT_OS=${SETTING_LOG_TESTS_INCORRECT_OS}
;; ;;
# What type of machine we are scanning (eg. desktop, server, server with storage) # What type of machine we are scanning (eg. personal, workstation or server)
machine-role | machine_role) machine-role | machine_role)
MACHINE_ROLE="${VALUE}" MACHINE_ROLE="${VALUE}"
AddSetting "machine-role" "${MACHINE_ROLE}" "Machine role (server or desktop)" AddSetting "machine-role" "${MACHINE_ROLE}" "Machine role (personal, workstation or server)"
;; ;;
# Define if any found NTP daemon instance is configured as a server or client # Define if any found NTP daemon instance is configured as a server or client

6
include/tests_hardening
View File

@ -105,9 +105,15 @@
AddHP 3 3 AddHP 3 3
else else
LogText "Result: no malware scanner found" LogText "Result: no malware scanner found"
if [$MACHINE_ROLE = "personal"]; then
Display --indent 4 --text "- Installed malware scanner" --result "${STATUS_NOT_FOUND}" --color YELLOW
else
Display --indent 4 --text "- Installed malware scanner" --result "${STATUS_NOT_FOUND}" --color RED
fi
Display --indent 4 --text "- Installed malware scanner" --result "${STATUS_NOT_FOUND}" --color RED Display --indent 4 --text "- Installed malware scanner" --result "${STATUS_NOT_FOUND}" --color RED
ReportSuggestion ${TEST_NO} "Harden the system by installing at least one malware scanner, to perform periodic file system scans" "-" "Install a tool like rkhunter, chkrootkit, OSSEC" ReportSuggestion ${TEST_NO} "Harden the system by installing at least one malware scanner, to perform periodic file system scans" "-" "Install a tool like rkhunter, chkrootkit, OSSEC"
AddHP 1 3 AddHP 1 3
LogText "Result: no malware scanner found"
fi fi
fi fi
# #

2
include/tests_networking
View File

@ -574,7 +574,7 @@
# Description : Checking for DHCP client # Description : Checking for DHCP client
Register --test-no NETW-3030 --weight L --network NO --category security --description "Checking DHCP client status" Register --test-no NETW-3030 --weight L --network NO --category security --description "Checking DHCP client status"
if [ ${SKIPTEST} -eq 0 ]; then if [ ${SKIPTEST} -eq 0 ]; then
IsRunning dhclient IsRunning dhclient || IsRunning dhcpd
if [ ${RUNNING} -eq 1 ]; then if [ ${RUNNING} -eq 1 ]; then
Display --indent 2 --text "- Checking status DHCP client" --result "${STATUS_RUNNING}" --color WHITE Display --indent 2 --text "- Checking status DHCP client" --result "${STATUS_RUNNING}" --color WHITE
DHCP_CLIENT_RUNNING=1 DHCP_CLIENT_RUNNING=1