Commit Graph

2391 Commits

Author SHA1 Message Date
Michael Boelen 7ebccab207
Updated URL for Lynis controls 2018-08-03 11:20:31 +02:00
Gonzalo L. R 963e033504 Update CONTRIBUTORS.md (#566)
add myself request by @mboelen because we all love Lynis
2018-07-30 11:07:43 +02:00
Michael Boelen 1f2f3d78ae
Updated log 2018-07-25 13:35:25 +02:00
Michael Boelen 0824dedede
Switch to development version 2.6.7 2018-07-25 13:35:17 +02:00
Michael Boelen 3f9d1308bb
[SSH-7408] adjusted classification of root login with keys 2018-07-25 13:35:00 +02:00
Michael Boelen 86b3e6ceb0
Updated log 2018-07-25 13:24:27 +02:00
Michael Boelen 4ad2ee4ba2
[BOOT-5104] added busybox to service managers 2018-07-25 13:24:11 +02:00
Michael Boelen 6e2f1552af
Updated log 2018-07-25 12:25:14 +02:00
Michael Boelen 7181b94382
[KRNL-5677] Limit PAE and no-execute test to AMD64 hardware only 2018-07-25 12:25:00 +02:00
Michael Boelen 126608e1d8
Updated log 2018-07-25 12:13:20 +02:00
Michael Boelen 54e8020edb
[LOGG-2190] ignore /dev/zero and /dev/[aio] as deleted files 2018-07-25 12:13:06 +02:00
Bernhard R. Fischer c024ce31d8 added path information for correct detection of config files and modules of Apache 2.4 (standard installation from ports tree) on FreeBSD (#562) 2018-07-24 19:08:45 +02:00
gkrystev 13d631781c Fix for umask check in case of multiple files (#560)
In case when umask is checked in multiple files and in some of the files except the last one a weak umask is found, the tool reports weak mask for the rest of the files. In the example bellow, the weak umask is only in /etc/csh.cshrc. However, the check /etc/profile is reported weak as well.

Expected:

Checking default umask values
Checking default umask in /etc/bashrc [ OK ]
Checking default umask in /etc/csh.cshrc [ WEAK ]
Checking default umask in /etc/profile [ OK ]
Actual:

Checking default umask values
Checking default umask in /etc/bashrc [ OK ]
Chhhhecking default umask in /etc/csh.cshrc [ WEAK ]
Chhhhecking default umask in /etc/profile [ WEAK ]
2018-07-24 19:08:08 +02:00
Michael Boelen fd729c222d Update GitHub issue templates 2018-07-24 19:07:08 +02:00
Michael Boelen 46bb8c8a71
Lynis 2.6.6 release 2018-07-06 15:04:39 +02:00
Michael Boelen fe2bfbb7fd
Updated log 2018-07-05 15:57:28 +02:00
Michael Boelen 81ea5df3b3
Fix: extra operand error 2018-07-05 15:57:19 +02:00
Michael Boelen 1b8459db08
Updated log 2018-07-02 14:52:37 +02:00
Michael Boelen 1bf09ad60a
[KRNL-5830] improved text in log 2018-07-02 14:52:29 +02:00
Michael Boelen 696cdbfbf1
Switch to 2.6.6 development 2018-06-28 16:29:44 +02:00
Michael Boelen 65190d214c
Move reporting of hostid2 to main section to ensure it is added to report 2018-06-28 16:29:16 +02:00
Michael Boelen 6e0ac57b68
Release 2.6.5 2018-06-26 15:12:16 +02:00
Michael Boelen 85feee25d5
Merge branch 'master' of https://github.com/CISOfy/lynis 2018-06-26 11:37:18 +02:00
Thomas Sjögren 8321da24c7 query DNS with FQDN (#555)
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2018-06-26 11:36:55 +02:00
Michael Boelen d80ec9d084
Removed 'update release' from help text 2018-06-26 11:35:02 +02:00
Michael Boelen 19b999dc79
[MAIL-8804] added 2018-06-26 11:34:32 +02:00
Michael Boelen 34813302b4
Changed number of Exim test and minor changes 2018-06-26 11:34:09 +02:00
Dave Vehrs c11177f98b Initial Tests for Exim (#539)
* Added kernel.dmesg_restrict to sysctl checks.

* Extending Exim Tests, round 1

* fixed a few string comparisons

* fixed old test

* Cleans to Exim options tests
2018-06-26 11:27:26 +02:00
aram535 1caf9ad12d Updated tests_ssh, removed extra ssh in the test (#557)
Seems like in the patch there was an extra 'ssh' added in the command line, which is breaking the ssh tests.  Removing the ssh keyword... -T -C ... fixes the problem.
2018-06-22 12:29:25 +02:00
Carsten Grohmann bf2462272e [TIME-3160] Extend check for step-tickers file for RedHat (#553)
On RedHat if the step-tickers file exists but empty, the ntp start
script uses the servers listed in ntp.conf for the initial time
synchronization.
2018-06-06 13:59:07 +02:00
Ozgur 6f7feed172 add AZ translate (#551) 2018-05-27 09:13:25 +02:00
Michael Boelen 84faf57b30
[SSH-7402] when SSH configuration has Match block, allow evaluation of full configuration 2018-05-14 08:29:30 +02:00
Michael Boelen 892a43c991
Switch to development of 2.6.5 2018-05-14 08:28:56 +02:00
Michael Boelen 53004754bc
Release 2.6.4 2018-05-02 13:35:57 +02:00
Michael Boelen 4efe5dd363
[DNS-1600] Test is disabled until domain is configured 2018-05-02 13:35:46 +02:00
Michael Boelen 235ec1c8d4
Merge branch 'master' of https://github.com/CISOfy/lynis 2018-05-02 13:19:32 +02:00
Michael Boelen 2547a06bce
Updated log 2018-05-02 13:19:23 +02:00
kisst 039945bde6 DNS-1600 Check for DNSSEC validation (#535) 2018-05-02 13:19:01 +02:00
Michael Boelen 08ee8136d5
Check for available parameter when using profile or plugindir 2018-05-02 12:48:05 +02:00
Michael Boelen 9f7aeb3e21
Use shortest version for defining plugin directory 2018-05-02 12:42:32 +02:00
Matyáš Koc 7fd8189907 Update for PHP 7.2 (#546)
Added php.ini paths used on Ubuntu with PHP 7.1/7.2
2018-05-02 11:14:20 +02:00
Michael Boelen 77b3b5c918
Updated log 2018-05-01 19:58:09 +02:00
Michael Boelen 170e427595
[NETW-2704] added support for local resolver used on Ubuntu 18.04 2018-05-01 19:57:23 +02:00
Michael Boelen 8c97017ba6
Added LSE badge 2018-04-29 20:37:35 +02:00
Michael Boelen 8077d24432
[PHP-2379] Suhosin test disabled 2018-04-23 11:06:36 +02:00
Michael Boelen f744d0b800
Updated log 2018-04-23 11:06:05 +02:00
Michael Boelen b52cbb841d
Updated log 2018-04-23 11:02:05 +02:00
Michael Boelen 105befb2e9
[AUTH-9308] Made 'sulogin' more generic for systemd rescue shell 2018-04-23 11:01:18 +02:00
Michael Boelen e858233eb6
Merge branch 'master' of https://github.com/CISOfy/lynis 2018-04-23 10:57:59 +02:00
Thomas Sjögren c25910cb31 delayed is a legacy synonym (#531)
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2018-04-23 10:57:27 +02:00