1022 Commits

Author SHA1 Message Date
mboelen
2cefdb79d6 Log when a file is world-writable according IsWorldWritable 2016-04-26 13:34:17 +02:00
mboelen
4791b8a6bf Add scheduler[] and minor cleanups 2016-04-26 13:05:17 +02:00
mboelen
448fd65e31 Remove tab 2016-04-26 13:00:41 +02:00
mboelen
705e2444ee [SCHD-7702] Added test to check cron daemon status 2016-04-26 12:58:17 +02:00
mboelen
ea9c40a36c Changed text to avoid showing up as a suggestion 2016-04-25 20:48:21 +02:00
mboelen
6143e7ed83 Updated bash completion script 2016-04-25 20:04:44 +02:00
mboelen
ee7b5f87bb [BANN-7119/BANN-7122] Disabled tests 2016-04-25 20:04:23 +02:00
mboelen
7878fad617 Removed --config option in favor of lynis show profiles 2016-04-25 20:04:00 +02:00
mboelen
4dcb9eccff Allow skipping of plugins with --skip-plugins or skip-plugins 2016-04-25 16:00:10 +02:00
mboelen
e5790dc8c6 Added: lynis show tests skipped (skipped tests) 2016-04-25 15:49:45 +02:00
mboelen
021fd8a98c Reduce debugging for PAM plugin 2016-04-25 15:49:21 +02:00
mboelen
ba0381a775 Lowercase all tests when using them in comparisons 2016-04-25 15:49:00 +02:00
mboelen
c02ab08b50 Set quiet and quickmode when using --show-warnings-only or show-warnings-only 2016-04-25 11:51:37 +02:00
mboelen
bedadd9cd1 Do not show text on screen in quiet mode 2016-04-25 11:13:27 +02:00
mboelen
22cb6d6523 Updated man page with new options 2016-04-25 11:10:39 +02:00
mboelen
2f07fa1d87 Allow show-warnings-only and --(show-)warnings-only option 2016-04-25 11:10:23 +02:00
mboelen
3e20c1e30b [KRNL-5788] Improvements for grsecurity kernels 2016-04-25 10:56:11 +02:00
mboelen
0f64d106b1 Changed supporting text for ReportManual function 2016-04-25 10:55:34 +02:00
mboelen
eae8ef99a4 Exit with exit code 0 by default, unless error-on-warnings is being used 2016-04-25 10:18:09 +02:00
mboelen
a3075d2e8f Added error-on-warnings 2016-04-25 10:17:14 +02:00
mboelen
32da184947 Add new hints to the database 2016-04-25 10:16:57 +02:00
Eric Light
bcdca90942 Update KRNL-5788 for grsecurity (#178)
* If grsec installed, build FINDKERNEL from uname -r

When running a grsecurity-patched custom kernel, the /vmlinuz link is often missing.  If this link is missing, and grsecurity is installed, then we can calculate the location of FINDKERNEL with the words "linux-image-", plus the output of "uname -r".

* Suggest manually checking kernel if grsec installed

We can't rely on the apt-cache output when running grsecurity.  This is because apt-cache can't tell us if we're running an up-to-date kernel, when it's a custom kernel with grsecurity.  Instead of confirming that the kernel is OK, we instead should remind the auditor to double-check themselves.
2016-04-25 09:34:14 +02:00
Eric Light
c0f86fef09 Minor reword ("latest" -> "latest installed") (#174) 2016-04-25 09:33:55 +02:00
mboelen
904da4d123 Allow additional profile with --profile 2016-04-23 17:55:32 +02:00
mboelen
7823cf60f5 Changed text when no auditor name is specified 2016-04-23 17:42:40 +02:00
mboelen
b336304ae6 Identation of help text 2016-04-23 17:06:10 +02:00
mboelen
998e63535c Changed colors and text of default help 2016-04-23 17:00:42 +02:00
mboelen
cdebe9dc06 Update date 2016-04-21 11:45:59 +02:00
mboelen
60a7abf877 [PKGS-7354] Test for DNF repoquery plugin before using it 2016-04-21 11:44:42 +02:00
mboelen
821be1ea0c Remove color between categories, to prevent new users missing that on white background 2016-04-20 14:14:10 +02:00
mboelen
560acfadf6 Log what particular atomic test has been skipped and why 2016-04-20 12:08:34 +02:00
mboelen
5757837e28 Show skipped items when running in verbose mode 2016-04-20 12:08:10 +02:00
Eric Light
a6393bd8a0 Display skipped atomic tests (#169)
Added section to log & display skipped atomic tests.
2016-04-20 10:46:40 +02:00
mboelen
11c4779dd7 Updated log 2016-04-19 21:12:54 +02:00
mboelen
f915df67d1 Add --verbose option 2016-04-19 21:11:42 +02:00
mboelen
4f2ae07fd4 Show program details when being verbose 2016-04-19 21:09:48 +02:00
mboelen
b1403aac20 Only show specific status of services when using --verbose 2016-04-19 21:09:27 +02:00
mboelen
5996dcdc95 Add verbose option to profiles 2016-04-19 19:47:50 +02:00
mboelen
f0e7b531cd Add --verbose option 2016-04-19 19:46:20 +02:00
mboelen
64561d4b07 Add IsDebug and IsVerbose functions 2016-04-19 19:44:23 +02:00
mboelen
d54f3ae307 Collect more ideas for improving the show command 2016-04-19 19:43:51 +02:00
mboelen
f1a5c41b87 Add note and changed example of quick 2016-04-19 19:43:25 +02:00
mboelen
c1f0b5e8b0 Allow usage of quick=yes in profile 2016-04-19 18:01:48 +02:00
mboelen
c2d5d93fad Colored output for debug details on screen 2016-04-19 18:01:16 +02:00
mboelen
1f0261f168 Add details to AddHP function 2016-04-19 17:48:06 +02:00
mboelen
166c35bc69 Change color when UEFI is disabled 2016-04-19 17:45:46 +02:00
mboelen
2a22e5c42a Renamed logtext and report function calls 2016-04-19 17:43:33 +02:00
mboelen
11d0dabf4f [FILE-6372] Ignore comments in /etc/fstab 2016-04-19 17:39:01 +02:00
mboelen
5aa1a27e32 Cleanup 2016-04-19 17:36:53 +02:00
mboelen
6d512f48ac Improved text for assigning hardening points 2016-04-19 17:35:45 +02:00