Michael Boelen
0bdcb57763
Merge branch 'master' into patch_3
2019-07-14 08:36:47 +02:00
Michael Boelen
82b1c63341
[NETW-3032] small rewrite of test and extended with addrwatch
2019-07-14 08:28:49 +02:00
Michael Boelen
96b9fc33e4
Add generator/version for future
2019-07-13 20:12:38 +02:00
Michael Boelen
6096db8828
Merge pull request #727 from Marzal/showhelperversion
...
Prepend sed to discard '## ' in CHANGELOG.md
2019-07-13 20:05:37 +02:00
Michael Boelen
9f7e0775a5
New command: lynis generate systemd-units
2019-07-13 20:03:30 +02:00
David
2dcf816e86
Prepend sed to discard '## ' in CHANGELOG.md
...
Since version 2.6.6 CHANGELOG.md has markdown formatting. This breaks the show changelog command.
This is a workaound to "fix" the issue without changing all the versions in CHANGELOG.md
2019-07-13 12:41:10 +02:00
Michael Boelen
76e84f4b56
Run non-interactive by default, use --wait to enforce waiting after finishing a group of tests
2019-07-12 14:38:52 +02:00
Michael Boelen
c31c6a5a9e
Add timing measurement of individual tests and report them
2019-07-12 14:20:32 +02:00
Michael Boelen
aaba4932b0
Show name of deprecated function on screen output
2019-07-12 13:13:39 +02:00
Michael Boelen
b9a13893b9
[NAME-4408] corrected Report function call
2019-07-12 13:12:59 +02:00
Michael Boelen
0f80fa07aa
New function SafeFile
2019-07-12 13:05:43 +02:00
Michael Boelen
ce263f8cd6
Textual changes
2019-07-10 20:22:31 +02:00
Michael Boelen
f40b4287eb
Show 'Not found' instead of 'OK'
2019-07-10 20:12:17 +02:00
Michael Boelen
afba58e743
[PROC-3802] test for presence of prelink tooling
2019-07-10 20:10:31 +02:00
Michael Boelen
1a57b41bdd
[PROC-3602] Use ROOTDIR
2019-07-10 20:00:52 +02:00
Michael Boelen
f5adb68e00
First round of cleanups and textual improvements
2019-07-10 19:36:51 +02:00
Michael Boelen
83d510934d
Quote file name as it may include spaces
2019-07-10 19:36:19 +02:00
Michael Boelen
c97dc3044a
Use exit code instead of ITEM_FOUND value
2019-07-10 19:35:51 +02:00
Michael Boelen
09d8832a0b
[CRYP-7903] enhanced test to properly work
2019-07-09 11:42:04 +02:00
Michael Boelen
ae474c72c6
[SSH-7402] detect other SSH daemons like dropbear and split SSH daemon from OpenSSH daemon
2019-07-09 11:16:59 +02:00
Michael Boelen
6891f64c39
Added CRYP-7930
2019-07-09 10:33:51 +02:00
Michael Boelen
f3f6be6630
Fix for incorrect subdirectory retrieval and adding enhancement to reduce number of evaluations needed
2019-07-08 21:20:45 +02:00
Michael Boelen
054ca21ee3
Fix: split directories
2019-07-08 21:19:28 +02:00
Michael Boelen
2c17c14c3b
New profile option to ignore specified certificate directories
2019-07-08 15:08:56 +02:00
Michael Boelen
1854e51e7e
New function: Equals
2019-07-08 15:05:28 +02:00
Michael Boelen
16146aabc0
Added option: ssl-certificate-paths-to-ignore
2019-07-08 14:27:40 +02:00
Michael Boelen
5217db95b1
Add deprecation message for old format and added check for unexpected/invalid characters in profile (additional security measure)
2019-07-07 18:49:01 +02:00
Michael Boelen
7a816ece8a
Added DisplayWarning function
2019-07-07 18:47:55 +02:00
Michael Boelen
05012f60fd
Added new colors and regrouping
2019-07-07 18:46:55 +02:00
Michael Boelen
007faf47c3
Cleanup of default profile and migration of permdir/permfile
2019-07-07 18:46:23 +02:00
Michael Boelen
c639cb4f6e
Only check empty binaries when we did a full scan, as for some commands the binary scanning is not performed
2019-07-05 18:37:10 +02:00
Michael Boelen
8d4fd1a7aa
Add Readonly() function
2019-07-05 18:35:45 +02:00
Michael Boelen
0443d643da
Show tip to use 'lynis generate hostids' when they are missing
2019-07-05 18:35:10 +02:00
Michael Boelen
ade3117307
New option to disable plugins via profile
2019-07-03 15:39:26 +02:00
Michael Boelen
2e1ec2c32f
Change variable name to better indicate what it does
2019-07-03 15:07:46 +02:00
Michael Boelen
bc88775d0e
When PATH is defined, only locations from variable
2019-07-01 07:39:32 +02:00
Michael Boelen
76c3ea0edb
Fall back to echo if ECHOCMD is empty early during execution of program
2019-06-30 20:38:05 +02:00
Michael Boelen
cb77d5a3f7
Show text when stopping execution
2019-06-30 20:37:33 +02:00
Michael Boelen
cfaea21430
Security: test all parameters and arguments for the presence of control characters
2019-06-30 19:29:48 +02:00
Michael Boelen
fdacc00b45
Security: test PATH and warn or exit on discovery of dangerous location
2019-06-30 19:21:07 +02:00
Michael Boelen
5e4e44bdf3
Added check to ensure that common system tools are defined as extra safety measure
2019-06-30 18:27:31 +02:00
Michael Boelen
08e8e59197
New function: SafeInput
2019-06-29 19:34:12 +02:00
Michael Boelen
dde57ce870
Merge branch 'master' of https://github.com/CISOfy/lynis
2019-06-24 15:47:39 +02:00
Michael Boelen
ec519dc976
Minor cleanups
2019-06-24 15:40:38 +02:00
Michael Boelen
d0377c563d
Added TLSv1 as weak protocol (nginx)
2019-06-24 15:40:18 +02:00
Michael Boelen
94e0a4e40d
Added Suricata (IDS)
2019-06-24 15:38:34 +02:00
Michael Boelen
8d16a62bbd
Added Bro (IDS)
2019-06-24 15:37:40 +02:00
Michael Boelen
b0f966ae48
Check number of arguments for 'audit dockerfile'
2019-06-24 15:33:42 +02:00
Michael Boelen
6f3c268c57
Non-functional code removed as it does not work as intended and lacks required validation controls - Thanks to Sander Bos for reporting
2019-06-24 15:23:30 +02:00
Michael Boelen
a312968dd6
Merge pull request #714 from deltablot/issue628
...
Add PHP ini file locations for Ubuntu 18.04. Fix #628
2019-06-24 13:46:30 +02:00