tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,130 Commits 2 Branches 61 Tags 16 MiB
Commit Graph

1130 Commits

Author SHA1 Message Date
mboelen 3e38d2fae5 Optimized help text on screen when running Lynis without any arguments 2016-04-12 21:59:00 +02:00
mboelen 8a35eed518 Show message on screen when data was uploaded 2016-04-12 21:58:19 +02:00
mboelen af13d322b9 Updated colors 2016-04-12 21:58:01 +02:00
mboelen c0228b8e48 Show release date 2016-04-11 07:57:29 +02:00
Kamil Boratyński 2465556567 features/testcases (#161) 
* Implemented equal test case.

* Implemented not-equal test case.

* Implemented greater-than test case.

* Implemented greater-or-equal test case.

* Implemented less-than test case.

* Implemented less-or-eqal test case.

Added some improvements and unifications.

* Added more unifications.

* Added more logs.

* Unified not-equal test.
 2016-04-10 16:32:21 +02:00
mboelen 066f562365 Allow parsing of multiple profiles 2016-04-07 16:25:11 +02:00
mboelen 810c37287f Support for show helper utility 2016-04-07 16:24:38 +02:00
mboelen c7c400f038 Allow multiple profiles 2016-04-07 16:24:11 +02:00
mboelen 78167f37f2 Clean up of old variables 2016-04-05 11:31:21 +02:00
mboelen 2f335eea5f Clean up of old variables 2016-04-05 11:28:11 +02:00
mboelen 03388532ec Update of timestamp 2016-04-05 10:03:24 +02:00
mboelen b954eeceec Optimized code and solve double proxy statement to upload command 2016-04-05 10:02:32 +02:00
Mincă Daniel Andrei 287a0e72a5 Replace repetitive echo commands with single printf statement 
* Format includedir conditional

Signed-off-by: Daniel Andrei Minca <mandrei17@gmail.com>

* Clean echos from security check message

Signed-off-by: Daniel Andrei Minca <mandrei17@gmail.com>

* Clean echos from Beta disclaimer

Signed-off-by: Daniel Andrei Minca <mandrei17@gmail.com>

* Clean echos from 2 instances of Lynis conditional

Signed-off-by: Daniel Andrei Minca <mandrei17@gmail.com>

* Format the 'Bail out if no param' condtitional

Signed-off-by: Daniel Andrei Minca <mandrei17@gmail.com>

* Format the 'non-priviledged scan mode' message

Signed-off-by: Daniel Andrei Minca <mandrei17@gmail.com>
 2016-04-04 13:18:35 +02:00
mboelen 95944c0035 Generic improvements for debug status, and cleaning up code 2016-04-02 18:28:53 +02:00
mboelen cab2b9071c Adding --debug to Display function 2016-04-02 18:28:02 +02:00
mboelen 40d11eb37b Added variables related to database status 2016-04-02 18:27:32 +02:00
mboelen 4e58267658 [DBS-1860] Changes to test to make it more optimized 2016-04-02 17:18:49 +02:00
mboelen 17c435801d Added return values to IsRunning function 2016-04-02 17:18:19 +02:00
Michael Boelen a991f73520 Merge pull request #154 from angoca/master 
Checks if DB2 LUW is running on a server
 2016-04-02 17:07:19 +02:00
Andres Gomez Casanova 1b9920fde9 Checks if DB2 LUW is running on a server 
The check if performing by doing a grep on db2sysc, the DB2 instance process.
 2016-04-01 17:38:20 -05:00
mboelen 1426ff16f9 Removed old Display function parameter --text 2016-03-30 14:35:16 +02:00
Michael Boelen 079efdada1 Merge pull request #138 from rhyven/patch-1 
Hide fail2ban open+deleted file warning, when grsec is installed
 2016-03-30 14:34:36 +02:00
Michael Boelen 420b72ae20 Merge pull request #140 from kboratynski/features/macosx_php 
Added OSX default php.ini location.
 2016-03-30 14:33:54 +02:00
Michael Boelen 570639599b Merge pull request #137 from technimad/technimad-patch-1-PHPiniEl6fix 
Added ini dir of EL6
 2016-03-30 14:33:27 +02:00
mboelen 70bb10328f Use echo when checking parameters to prevent incorrect issues with screen output 2016-03-30 14:26:01 +02:00
mboelen 4d52e64b2a Match sshd process running and/or port 22 listening 2016-03-30 13:48:18 +02:00
mboelen 251b861df5 Changed function name to better reflect goal and UDP support 2016-03-30 13:45:34 +02:00
mboelen 3ad0bc9582 Renamed function to IsPortListening 2016-03-30 12:18:11 +02:00
Michael Boelen beb02e2c3d Merge pull request #142 from kboratynski/features/sshd 
features/sshd
 2016-03-30 11:55:58 +02:00
Michael Boelen f8a3c996e0 Merge pull request #150 from cnrat/master 
Echo used instead of cat
 2016-03-30 11:43:35 +02:00
cnrat fcaa7ffe8b Bug fixed 
echo /etc/fstab is wrong.
 2016-03-29 16:35:39 +08:00
mboelen 0e9b63a6ed Adjusted variable to properly check systemd directory 2016-03-24 17:28:53 +01:00
mboelen 0779005b46 [AUTH-9308] Skip testing some files when systemd is used 2016-03-24 17:16:14 +01:00
mboelen d7c8233dd4 Check for systemd 2016-03-24 17:15:39 +01:00
mboelen 0d2be381f9 [AUTH-9308] Test systemd targets 2016-03-24 16:46:54 +01:00
mboelen 95df056ca8 Don't use type -p, as it won't work on all systems 2016-03-24 14:35:12 +01:00
mboelen c70be62f4e Added Let's Encrypt path /etc/letsencrypt 2016-03-24 13:44:28 +01:00
mboelen 45f6bcc601 Minor text changes 2016-03-24 11:11:40 +01:00
Michael Boelen d1bb7855df Merge pull request #139 from rhyven/patch-2 
AUTH-9262 - restructure + pwquality
 2016-03-24 10:52:20 +01:00
Michael Boelen 30dae85a63 Merge pull request #141 from kboratynski/features/macosx_brew 
Added brew as package manager.
 2016-03-24 10:48:03 +01:00
mboelen 56563d89f5 Promoted to new development version 2016-03-24 10:43:44 +01:00
mboelen a3084da623 Improved templates and examples 2016-03-24 10:34:16 +01:00
mboelen c364fbe9b8 Updated list and changed file 2016-03-23 17:01:57 +01:00
Kamil Boratyński 1f320f68c2 Fixed IsTcpUdpListening function 2016-03-22 23:57:09 +01:00
Kamil Boratyński 232419df8c Modified SSH service checking. 2016-03-22 23:54:38 +01:00
Kamil Boratyński 3e5555fb12 Added listening function. 
Listening functions checks whether there exist a service listening
on specified protocol and port.
 2016-03-22 23:53:58 +01:00
Kamil Boratyński 85236bb996 Added brew as package manager. 2016-03-22 23:06:10 +01:00
Kamil Boratyński 89cb26c1f1 Added OSX default php.ini location. 2016-03-22 22:21:55 +01:00
Eric Light fad4dfc0cc Modified AUTH-9262 
Added pwquality (default in some Ubuntu variants) to accepted password-quality modules.  Reworked test so that full points are possible (passwdqc and cracklib incompatible).
 2016-03-22 16:30:47 +13:00
Eric Light 2a2c094825 Hide fail2ban open+deleted file warning with grsec 
One of the features in grsecurity also prevents Fail2Ban from creating a temp file under /var/tmp.  I've been unable to pinpoint the line in fail2ban which causes the issue, but have confirmed it's related to Fail2Ban.

Note: disabling the PaX MPROTECT function on /usr/bin/python will also resolve this issue, but it's better to keep MPROTECT on.
 2016-03-22 15:28:21 +13:00