tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,240 Commits 2 Branches 62 Tags 17 MiB
Commit Graph

2129 Commits

Author SHA1 Message Date
Michael Boelen ab1111c0ed
Merge pull request #905 from topimiettinen/check-non-native-binary-formats 
Check for registered non-native binary formats
 2021-01-07 15:16:34 +01:00
Michael Boelen a2f4d52404
Added CCBINARY and GCCBINARY 2021-01-07 12:36:10 +01:00
Michael Boelen cd6edc577b
Small style improvement 2021-01-07 11:34:46 +01:00
Michael Boelen c38c89ae4e
Merge pull request #1004 from Varbin/1003-os-detection 
Test for LINUX_VERSION before setting it again
 2021-01-07 11:30:51 +01:00
Michael Boelen 0abf01b358
Merge pull request #1100 from teoberi/Lynis-with-MariaDB->-10.4 
[DBS-1816] Force test to check only password authentication
 2021-01-07 11:09:40 +01:00
Michael Boelen c864daa742
Merge pull request #1104 from steph78630/master 
Add and improvements strings (GUI)
 2021-01-06 15:17:34 +01:00
Michael Boelen a5a0bc0434
Merge pull request #1099 from gcsgithub/master 
fix syntax must include ${}
 2021-01-06 13:59:42 +01:00
Stéphane f1604c2e55
Add and improvements strings 2021-01-05 11:53:11 +01:00
teoberi 82e5a8beed
Update tests_databases 
Fix for Test: DBS-1816 - Check empty MySQL root password
 2021-01-03 11:48:34 +02:00
Mark Garrett c8175cf74d Syntax fix was only valid in ksh93+ 2021-01-03 18:29:17 +11:00
Brian Ginsbach 7292f0f179 KRNL-5677 add NetBSD 
It is possible that NetBSD has the `proc` filesystem mounted. When
`/proc` is mounted there will be a `/proc/cpuinfo`. Handle the simple
case first (`proc` filesystem mounted). There are multiple other means
to determine PAE/NX without `/proc/cpuinfo`.
 2020-12-31 21:02:04 -06:00
Brian Ginsbach 89403f1494 Multiple platform support in Register 
Support specifying multiple platforms with `--platform`. Useful as
not all operating systems identify identical hardware (platforms)
with the same name (example x86_64 and amd64).
 2020-12-31 21:02:04 -06:00
Michael Boelen 8053165d2f
Remove check at this place 2020-12-28 18:34:19 +01:00
Michael Boelen 7f613f17ca
Improved call-to-action when OS is unknown 2020-12-26 15:37:46 +01:00
Michael Boelen fa69256f45
Added support for Parrot GNU/Linux 2020-12-26 15:36:36 +01:00
Michael Boelen 372c7fb98e
Merge pull request #1087 from konstruktoid/ISSUE1085 
only fail AUTH-9230 if both SHA_CRYPT_{MIN,MAX}_ROUNDS are undefined
 2020-12-24 10:19:25 +01:00
Michael Boelen 44201f02ab
Added elementary OS 2020-12-18 14:04:58 +01:00
Michael Boelen a26ebd3004
Fix: missing curly bracket 2020-12-17 20:17:52 +01:00
Michael Boelen 8fb98cb25c
Only retrieve exit code 
Redirect output of the count and every error to /dev/null, so we only get the exit code
 2020-12-17 14:51:52 +01:00
Michael Boelen 208518d8fa
Merge pull request #1088 from steph78630/master 
Addition and improvement of translated strings
 2020-12-17 14:23:48 +01:00
Michael Boelen c9a57d2caf
Merge pull request #1062 from Varbin/solaris-loghost-not-localhost 
Test if loghost is not localhost
 2020-12-17 14:18:31 +01:00
Stéphane 4cf9660185
Adding and improvement translated strings 2020-12-16 01:07:27 +01:00
Thomas Sjögren 60ed001140 indentation 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-15 23:14:03 +01:00
Michael Boelen 701be9852b
Merge pull request #1060 from Varbin/solaris-netstat 
[NETW-3012] Use netstat on Solaris to gather listening ports
 2020-12-15 14:30:09 +01:00
Michael Boelen 258b2bf05f
Merge pull request #1064 from Varbin/solaris-ips-svcs 
Add support for Solaris services, run BOOT-5184 there
 2020-12-15 14:16:18 +01:00
Michael Boelen 15ec001a2a
Merge pull request #1074 from Varbin/german-translation 
Extend German translation and add more translated statuses
 2020-12-15 14:13:03 +01:00
Michael Boelen 6e14b73b0c
Merge pull request #1079 from Varbin/1078-path-spaces 
Quote binary variables during SUID/GID enumeration
 2020-12-15 14:11:08 +01:00
Michael Boelen d1d3882130
Merge pull request #1076 from Varbin/1075-solaris-hostid 
Use first e1000 interface and break after match (for hostid generation on Solaris)
 2020-12-15 14:10:34 +01:00
Thomas Sjögren 807cfd430a nitpick about new line 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-15 01:45:58 +01:00
Thomas Sjögren fbb8ffa301 only check the lowest hashing round value, and correct log text 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-15 01:43:10 +01:00
Thomas Sjögren 76e89b525b only fail AUTH-9230 if no _MAX_ROUNDS is defined 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-14 21:43:14 +01:00
ElviaSchoultz d5d43c5d1c
Add EndeavourOS to osdetection. 
Fixes problem #1077
 2020-11-24 08:45:58 +11:00
Simon Biewald f695488ca8 Quote binary variables during SUID/GID enumeration 
Fixes cisofy/lynis#1078.

Signed-off-by: Simon Biewald <sbiewald@fam-biewald.de>
 2020-11-21 01:34:18 +01:00
Simon Biewald 73f39baca8 Use first e1000 interface and break after match 
Fixes CISOfy/lynis#1075.

Before this commit, the interfaces "e1000g1" and "net0" were allowed.
The name "e1000g0" is appended to the list.
After finding an interface, the loop is interrupted now. As previously
"net0" was always used, even if another interface was available, the list
is reordered to "net0 e1000g1 e1000g0" to not break previous generations.

A typo is also fixed ("No interface found op Solaris ..." -> "No
interface found on").

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-14 22:56:42 +00:00
Simon Biewald 0c686bb6ea Use the new status strings in tests 
See-Also: HEAD^
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-14 20:34:43 +00:00
Michael Boelen 22a9fe7037
Merge pull request #1059 from Varbin/solaris-grub-d 
Test if /etc/grub.d is a directory
 2020-11-13 16:45:59 +01:00
Michael Boelen eb759f4c13
Merge pull request #1071 from Varbin/opensolaris-detection 
OpenSolaris distribution detection
 2020-11-13 16:01:00 +01:00
Michael Boelen 6026b82e14
Merge pull request #1073 from Varbin/1040-1068-os-detection 
Add NixOS and IPFire
 2020-11-13 15:58:20 +01:00
Simon Biewald 3f83b9ac86 Add NixOS to osdetection 
Fixes cisofy/lynis#1068.

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-12 22:56:31 +01:00
Simon Biewald 183af1d334 Add IPFire to osdetection 
Fixes cisofy/lynis#1040.

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-12 22:12:26 +01:00
Simon Biewald d388e5d269 Add OpenSolaris and distribution detection 
New variable OPENSOLARIS to distringuish between Oracle Solaris and
OpenSolaris derivates. The edge case of OpenSolaris itself is not yet
solved, but OpenSolaris itself should be very rare these days.

Currently detected and distinguished Solaris variants are:
 - Oracle Solaris >= 11 (exluding Solaris Express and OpenSolaris)
 - Solaris < 11 (as "Sun Solaris")
 - OmniosCE (but not old Omnios)
 - OpenIndiana
 - Shillix
 - SmartOS
 - Tribblix
 - "Unknown Illumos" for unknown distributions based on Illumos

Lynis will fall back to "Sun Solaris" with "SunOS 5.X" for unknown
distributions.
 2020-11-09 23:25:33 +00:00
Simon Biewald 3c31a08024 Do not incorrectly name SFM as IPS 
The "new" service manager was included with Solaris 10 and not 11. It is
named "service management facility" (see smf(5) man page).
There is no IPS service manager, the name is only used for the package
manager of OpenSolaris and Solaris 11.

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-09 23:18:00 +00:00
Michael Boelen 37631b0457
Merge pull request #1061 from Varbin/solaris-hostname 
Simplify tr hostname checking expression
 2020-11-09 14:12:39 +01:00
Michael Boelen f0b7f9159d
Merge pull request #1069 from Varbin/1065-opensolaris-invalid-characters 
Use `od` only for displaying invalid characters
 2020-11-09 10:36:37 +01:00
Josh Soref 6435aeba8a spelling: unknown 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:56:31 -05:00
Josh Soref 9d0e1938aa spelling: therefore 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:56:31 -05:00
Josh Soref 7157eb45f0 spelling: suggestions 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:53:09 -05:00
Josh Soref f22e192838 spelling: successful 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:53:09 -05:00
Josh Soref 2b26f13bed spelling: params 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:53:09 -05:00
Josh Soref f14e12f688 spelling: installed 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:38:46 -05:00