tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
2,827 Commits 2 Branches 62 Tags 17 MiB
Commit Graph

133 Commits

Author SHA1 Message Date
Michael Boelen 32cefdea0a
Merge pull request #878 from topimiettinen/check-ima-evm 
Check IMA/EVM, dm-integrity and dm-verity statuses
 2020-03-23 13:18:16 +01:00
Michael Boelen 122619d01f
Merge pull request #874 from topimiettinen/check-password-hashing-methods 
Check password hashing methods
 2020-03-23 12:49:20 +01:00
Topi Miettinen 8ea39314f2
Check for dm-integrity and dm-verity 
Detect tools for dm-integrity and dm-verity, check if some devices
in /dev/mapper/* use them and especially the system root device.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-23 10:35:38 +02:00
Topi Miettinen 203a4d3480
Check IMA/EVM status 
Check for evmctl (Extended Verification Module) tool and system IMA (Integrity Measurement
Architecture) status.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-22 11:21:52 +02:00
Topi Miettinen 26a54991ba
Check for software pseudo random number generators 
Check for running audio-entropyd, havegd or jitterentropy-rngd.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-21 16:26:30 +02:00
Michael Boelen 6e9482a571
Merge branch 'master' into netbsd-eol 2020-03-21 13:34:41 +01:00
Topi Miettinen 4a51ad031b
Check password hashing methods 
Manual page crypt(5) gives recommendations for choosing password
hashing methods, so let's check if there are weakly encrypted
passwords in the system.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-21 12:50:38 +02:00
Brian Ginsbach 50fc3f816a Add NetBSD EOL data 2020-03-20 13:42:28 -05:00
Brian Ginsbach 52344913d3 Add a way to signify undetermined EOL 
Replace setting an artificaly high date and converted date for
operating systems with no EOL (rolling) or the EOL is still to
be determined. This makes it easier for humans and saves making
a comparison (when using an artifically high converted time)
will always be false (EOL=0).

An example entry

        os:AGreatOS 2.0:👎

The converted time (seconds since the epoch) could be specified as
zero but this typically means the OS is out of date (now), A value
of -1 is a convention indicating no EOL.
 2020-03-20 13:42:28 -05:00
Michael Boelen af03c07d9f
Shortened CentOS 7/8 strings to allow match and added note 2020-03-20 19:39:49 +01:00
Michael Boelen 724acf1be5
Added CentOS 8 end-of-life 2020-03-20 19:33:10 +01:00
Michael Boelen 27cdcec741
Add CentOS 7 (Core) 2020-03-20 14:57:28 +01:00
Michael Boelen 8f37edb626
Update tests.db 
Corrected test ID
 2020-03-20 09:46:08 +01:00
Topi Miettinen 820d2ec607
Check DNSSEC status with resolvectl when available 
'resolvectl statistics' shows if DNSSEC is supported by
systemd-resolved and upstream DNS servers.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-19 23:56:24 +02:00
Topi Miettinen 3aaeeea856
Check for rEFInd boot loader 
Detect rEFInd boot loader (https://www.rodsbooks.com/refind/).

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-19 15:44:30 +02:00
Michael Boelen 3bbe34ea73
[CRYP-8004] enhanced after pulling in initital test 2020-02-15 14:09:56 +01:00
pyllyukko c88953a815
Test SINT-7010 in macOS only 2019-10-08 20:31:35 +03:00
Michael Boelen 87f5596952
Added new test DBS-1828 2019-10-08 15:15:18 +02:00
Michael Boelen f188bac7e8
Update description for FILE-6374 2019-10-08 15:10:02 +02:00
Michael Boelen 157c23e892
Added additional string 2019-09-12 11:14:44 +02:00
Michael Boelen b3cb6e91f0
Ordering of entries 2019-09-03 10:55:05 +02:00
2*yo b8c3c55d68
Add Debian EOL 2019-09-03 10:41:13 +02:00
Michael Boelen a87c2b10f9
Added CRYP-8002 2019-08-29 10:39:43 +02:00
Michael Boelen 1e4e00adea
Changed description of TOOL-5160 2019-08-28 15:37:35 +02:00
Michael Boelen f89aa98408
Added FINT-4316 2019-08-26 08:02:11 +02:00
Michael Boelen d2deb63ebb
Added NETW-3200 2019-08-22 14:12:53 +02:00
Michael Boelen d3464d88b1
[CRYP-7930] changed description 2019-08-21 14:08:17 +02:00
Michael Boelen e5b8047133
Added data and detection of Amazon Linux 2019-08-13 22:00:30 +02:00
Michael Boelen 3e392c8e6c
Added end-of-life data for Arch Linux (rolling) 2019-08-13 21:40:29 +02:00
Michael Boelen a510c1c136
Sorting and added new strings 2019-08-08 12:38:46 +02:00
Michael Boelen 0a6417423f
Added HOME-9304 and HOME-9306 2019-07-26 14:15:09 +02:00
Michael Boelen 3213cadd5a
Added new tests INSE-8318 and INSE-8320 2019-07-16 13:13:25 +02:00
Michael Boelen 27b2a4dc7a
Renamed STRG-1840 and STRG-1842 2019-07-15 20:04:59 +02:00
Michael Boelen 7d33b59b0c
Added tests 2019-07-14 13:19:11 +02:00
Michael Boelen e4498be840
Added new test: PROC-3802 2019-07-10 20:12:43 +02:00
Michael Boelen 6891f64c39
Added CRYP-7930 2019-07-09 10:33:51 +02:00
Michael Boelen a49ea33fea
Changed Ubuntu 18.10 period 2019-07-07 18:47:35 +02:00
pyllyukko 2065b06e95
Added Slackware Linux EOLs 2019-06-12 11:44:22 +03:00
Patark a64e3966c9 Add danish language support (#718) 2019-05-30 12:38:11 +02:00
Thomas Sjögren 4370c4a241 update CentOS releases in software-eol.db (#721) 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2019-05-30 12:36:26 +02:00
Michael Boelen 2855e8503e
Corrected CentOS entries 2019-04-15 19:20:43 +02:00
Michael Boelen 7ebfd3015c
Added new tests 2019-04-04 14:42:06 +02:00
Michael Boelen f2e6b23c9f
Added PKGS-7420 2019-04-02 11:14:49 +02:00
Michael Boelen c83f87853f
Add new tests 2019-03-07 11:01:33 +01:00
Jerry Park 89bf607498 Added Korean translation (#652) 
* Korean translation for ko-KR

Translation in Korean

* changed ko-KR to ko
 2019-03-07 10:01:02 +01:00
Michael Boelen 32fc4a01b0
Corrected FreeBSD, added CentOS and OpenBSD 2019-03-05 19:31:11 +01:00
jirib 0dafe4a02b better OpenBSD support (#641) 2019-03-05 19:03:44 +01:00
Michael Boelen 19f38bc1ef
Updated entries 2019-03-04 13:40:40 +01:00
Michael Boelen f7a291a62f
Use datestamps instead of date, due to compatibility with other platforms 2019-03-04 12:33:03 +01:00
Michael Boelen 34a2742cdb
Initial support for end-of-life OS detection 2019-02-26 16:15:15 +01:00