Commit Graph

2143 Commits

Author SHA1 Message Date
Michael Boelen 76b4afb14d
[SSH-7408] set default 'delayed' compression as a sane value 2017-09-18 19:18:11 +02:00
Michael Boelen 053535ec37
Updated log 2017-09-18 19:17:45 +02:00
Michael Boelen 5768d39e16
Updated translations 2017-09-18 08:01:00 +02:00
Michael Boelen c3f3e22290
Show language in output 2017-09-17 20:15:57 +02:00
Michael Boelen 01a806dd45
Extended and activated languages 2017-09-17 20:15:39 +02:00
Michael Boelen 9acbd039a3
Updated log 2017-09-17 20:03:26 +02:00
Jesus Christian Cruz Acono 159477ca6d Update es (#464)
added more strings
2017-09-17 20:02:22 +02:00
Michael Boelen 94f656bf65
Add 127.0.1.1 to NETW-2704 test 2017-09-17 20:01:07 +02:00
Michael Boelen 6aecde7e14
Updated log 2017-09-16 14:25:18 +02:00
Michael Boelen 3670e0c5c9
Minor changes to using local resolvers 2017-09-16 14:25:01 +02:00
Michael Boelen 83ce145f1b
Merge branch 'master' of https://github.com/CISOfy/lynis 2017-09-16 14:10:20 +02:00
Ben Abrams 192cc494ed [NETW-2705] This is related to #437 and resolvconf but is split up. (#459)
This specifically makes it so that when `/etc/resolv.conf` has one or more nameservers matching `127.0.[0-1].1` it should not warn as it is using local resolvers.

We are simply using `grep -c "127.0.[0-1].1" /etc/resolv.conf` to determine this.
2017-09-16 14:09:32 +02:00
Michael Boelen 11f81345ee
Code enhancement 2017-09-16 14:08:38 +02:00
Michael Boelen 499f7d5015
Improve process detection 2017-09-16 14:08:26 +02:00
FlorentCoppint ccf9db18f8 Improved IsRunning() process matching (#463) 2017-09-16 13:58:04 +02:00
Michael Boelen 79278c32ef
Added extra legal words for banners 2017-09-12 15:23:37 +02:00
Michael Boelen 6199d26861
Change to development 2017-09-12 15:23:22 +02:00
Michael Boelen daeec982ab
Release 2.5.5 2017-09-07 10:28:19 +02:00
Michael Boelen c248ab6a16
[CRYP-7902] fix for bourne shell and rewrite 2017-09-06 12:56:32 +02:00
Michael Boelen 2451029a6e
Allow for files with spaces 2017-09-06 12:55:56 +02:00
Michael Boelen 61d28ac73c
Start development of 2.5.5 2017-09-06 12:55:31 +02:00
Michael Boelen 72dc0de32b
Release 2.5.4 2017-09-05 13:30:32 +02:00
Michael Boelen 77400d3952
Improve logging 2017-09-05 13:29:21 +02:00
Brian Ginsbach 30c58dd1ed Don't assume sshd version is in first line (#452)
There are some versions of OpenSSH where the version information
isn't in the first line (like NetBSD's with the HPN patches).
2017-09-04 15:33:28 +02:00
Brian Ginsbach 8e97fc5625 Various PAM cleanups for FreeBSD, NetBSD, and macOS. (#454)
* Use PAM_DIRECTORY variable where appropriate

* Skip checking FreeBSD/NetBSD pam.d/README as a PAM file

FreeBSD and NetBSD install a README file in /etc/pam.d.  Attempting
to check this file as a PAM file just generates a lot of garbage
exceptions in the log.

* Handle 'include' as a PAM control-flag

OpenPAM and some versions of Linux PAM can have a configuration
where the control-flag is 'include'.  Skip further processing as
these files will be processed separately.

* Add missing commonly seen specific PAMs

Add some missing commonly seen specific PAMs from FreeBSD, NetBSD,
and OS X/macOS. The OS X/macOS PAMs were taken from a 10.5 (Leopard)
and 10.10 (Yosemite) system respectively.

Both FreeBSD and NetBSD come with a pam_ssh PAM.  Add a warning
when found confitured as it presents a potential security risk (see
pam_ssh(8) on FreeBSD/NetBSD).
2017-09-04 15:32:57 +02:00
Tom Reynolds 41174afda6 Do not limit debsums to Debian systems (#457)
Debsums is supported on Debian and other systems as per GitHub issue #446. 
Undo commit d1969001c6.
2017-09-04 15:30:25 +02:00
Michael Boelen 92d53581f9
Updated log 2017-09-01 16:24:44 +02:00
bruberg 9ddf9e7335 Add Norwegian language file (#450) 2017-09-01 16:23:39 +02:00
Michael Boelen 0fc8adb3c5
When providing suggestion related to hostid, append to file instead of overwriting 2017-08-31 17:11:15 +02:00
Michael Boelen 769b1f49e2
Detection of Linux Mint missed right field 2017-08-31 17:04:17 +02:00
tobiasfielitz 5aaf81c267 removed "update release" from menu (#448) 2017-08-30 19:12:51 +02:00
Bruno Vernay 6cf1c324f8 Support spaces in file names (#445)
* Support spaces in file names

File names may contain spaces

* Fixed 2more cases
2017-08-29 14:33:18 +02:00
Bruno Vernay 4107d8a461 Support spaces in file names (#444)
File names may contain spaces
2017-08-29 14:32:42 +02:00
Michael Boelen de65787b3a
Merge branch 'master' of https://github.com/CISOfy/lynis 2017-08-19 10:55:40 +02:00
Michael Boelen 81a54da6b8
Updated log 2017-08-19 10:55:13 +02:00
Brian Ginsbach 3512068a49 [PKGS-7380] Fix NetBSD packages vulnerabilities file name (#443)
* [PKGS-7380] Fix NetBSD packages vulnerabilities file name

* OS Detection: Add early Mac OS X releases
2017-08-19 10:53:25 +02:00
Michael Boelen e4472b357c
Updated log 2017-08-19 10:51:16 +02:00
Michael Boelen d682673c63
Preparations for APT 2017-08-19 10:51:06 +02:00
Michael Boelen 06491a5b4f
Linux Mint detection 2017-08-19 10:50:53 +02:00
Michael Boelen 1190efac2b
[CRYP-7902] add a test to filter out non-certificate files 2017-08-18 19:19:15 +02:00
Michael Boelen 4a673aebc7
[CRYP-7902] certificate validation changed 2017-08-18 14:14:28 +02:00
Michael Boelen f60db7d950
Updated log 2017-08-18 14:14:01 +02:00
Michael Boelen ce663936c3 Create CODE_OF_CONDUCT.md 2017-08-17 20:37:37 +02:00
Michael Boelen 50ed503916
Rename of file to preferred naming 2017-08-17 20:34:10 +02:00
Michael Boelen 011639bc60
Textual improvement 2017-08-17 20:30:08 +02:00
Michael Boelen 5b0f87b4ea
Updated log 2017-08-17 20:29:03 +02:00
Michael Boelen 00648a636c
Improve systemd detection 2017-08-17 20:28:32 +02:00
Michael Boelen c0a6aaf855
[TOOL-5002] performance enhancement to reduce number of dirs/files to check 2017-08-17 20:10:51 +02:00
Michael Boelen 0caf42bc51
Switch to 2.5.4 development 2017-08-17 20:06:58 +02:00
Michael Boelen 5be81289ee
[TOOL-5002] rewrite of Ansible detection 2017-08-17 20:06:41 +02:00