Commit Graph

2130 Commits

Author SHA1 Message Date
Bernhard R. Fischer c024ce31d8 added path information for correct detection of config files and modules of Apache 2.4 (standard installation from ports tree) on FreeBSD (#562) 2018-07-24 19:08:45 +02:00
gkrystev 13d631781c Fix for umask check in case of multiple files (#560)
In case when umask is checked in multiple files and in some of the files except the last one a weak umask is found, the tool reports weak mask for the rest of the files. In the example bellow, the weak umask is only in /etc/csh.cshrc. However, the check /etc/profile is reported weak as well.

Expected:

Checking default umask values
Checking default umask in /etc/bashrc [ OK ]
Checking default umask in /etc/csh.cshrc [ WEAK ]
Checking default umask in /etc/profile [ OK ]
Actual:

Checking default umask values
Checking default umask in /etc/bashrc [ OK ]
Chhhhecking default umask in /etc/csh.cshrc [ WEAK ]
Chhhhecking default umask in /etc/profile [ WEAK ]
2018-07-24 19:08:08 +02:00
Michael Boelen fd729c222d Update GitHub issue templates 2018-07-24 19:07:08 +02:00
Michael Boelen 46bb8c8a71
Lynis 2.6.6 release 2018-07-06 15:04:39 +02:00
Michael Boelen fe2bfbb7fd
Updated log 2018-07-05 15:57:28 +02:00
Michael Boelen 81ea5df3b3
Fix: extra operand error 2018-07-05 15:57:19 +02:00
Michael Boelen 1b8459db08
Updated log 2018-07-02 14:52:37 +02:00
Michael Boelen 1bf09ad60a
[KRNL-5830] improved text in log 2018-07-02 14:52:29 +02:00
Michael Boelen 696cdbfbf1
Switch to 2.6.6 development 2018-06-28 16:29:44 +02:00
Michael Boelen 65190d214c
Move reporting of hostid2 to main section to ensure it is added to report 2018-06-28 16:29:16 +02:00
Michael Boelen 6e0ac57b68
Release 2.6.5 2018-06-26 15:12:16 +02:00
Michael Boelen 85feee25d5
Merge branch 'master' of https://github.com/CISOfy/lynis 2018-06-26 11:37:18 +02:00
Thomas Sjögren 8321da24c7 query DNS with FQDN (#555)
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2018-06-26 11:36:55 +02:00
Michael Boelen d80ec9d084
Removed 'update release' from help text 2018-06-26 11:35:02 +02:00
Michael Boelen 19b999dc79
[MAIL-8804] added 2018-06-26 11:34:32 +02:00
Michael Boelen 34813302b4
Changed number of Exim test and minor changes 2018-06-26 11:34:09 +02:00
Dave Vehrs c11177f98b Initial Tests for Exim (#539)
* Added kernel.dmesg_restrict to sysctl checks.

* Extending Exim Tests, round 1

* fixed a few string comparisons

* fixed old test

* Cleans to Exim options tests
2018-06-26 11:27:26 +02:00
aram535 1caf9ad12d Updated tests_ssh, removed extra ssh in the test (#557)
Seems like in the patch there was an extra 'ssh' added in the command line, which is breaking the ssh tests.  Removing the ssh keyword... -T -C ... fixes the problem.
2018-06-22 12:29:25 +02:00
Carsten Grohmann bf2462272e [TIME-3160] Extend check for step-tickers file for RedHat (#553)
On RedHat if the step-tickers file exists but empty, the ntp start
script uses the servers listed in ntp.conf for the initial time
synchronization.
2018-06-06 13:59:07 +02:00
Ozgur 6f7feed172 add AZ translate (#551) 2018-05-27 09:13:25 +02:00
Michael Boelen 84faf57b30
[SSH-7402] when SSH configuration has Match block, allow evaluation of full configuration 2018-05-14 08:29:30 +02:00
Michael Boelen 892a43c991
Switch to development of 2.6.5 2018-05-14 08:28:56 +02:00
Michael Boelen 53004754bc
Release 2.6.4 2018-05-02 13:35:57 +02:00
Michael Boelen 4efe5dd363
[DNS-1600] Test is disabled until domain is configured 2018-05-02 13:35:46 +02:00
Michael Boelen 235ec1c8d4
Merge branch 'master' of https://github.com/CISOfy/lynis 2018-05-02 13:19:32 +02:00
Michael Boelen 2547a06bce
Updated log 2018-05-02 13:19:23 +02:00
kisst 039945bde6 DNS-1600 Check for DNSSEC validation (#535) 2018-05-02 13:19:01 +02:00
Michael Boelen 08ee8136d5
Check for available parameter when using profile or plugindir 2018-05-02 12:48:05 +02:00
Michael Boelen 9f7aeb3e21
Use shortest version for defining plugin directory 2018-05-02 12:42:32 +02:00
Matyáš Koc 7fd8189907 Update for PHP 7.2 (#546)
Added php.ini paths used on Ubuntu with PHP 7.1/7.2
2018-05-02 11:14:20 +02:00
Michael Boelen 77b3b5c918
Updated log 2018-05-01 19:58:09 +02:00
Michael Boelen 170e427595
[NETW-2704] added support for local resolver used on Ubuntu 18.04 2018-05-01 19:57:23 +02:00
Michael Boelen 8c97017ba6
Added LSE badge 2018-04-29 20:37:35 +02:00
Michael Boelen 8077d24432
[PHP-2379] Suhosin test disabled 2018-04-23 11:06:36 +02:00
Michael Boelen f744d0b800
Updated log 2018-04-23 11:06:05 +02:00
Michael Boelen b52cbb841d
Updated log 2018-04-23 11:02:05 +02:00
Michael Boelen 105befb2e9
[AUTH-9308] Made 'sulogin' more generic for systemd rescue shell 2018-04-23 11:01:18 +02:00
Michael Boelen e858233eb6
Merge branch 'master' of https://github.com/CISOfy/lynis 2018-04-23 10:57:59 +02:00
Thomas Sjögren c25910cb31 delayed is a legacy synonym (#531)
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2018-04-23 10:57:27 +02:00
Michael Boelen 40d6a853d5
Changed file permissions 2018-04-23 10:56:26 +02:00
John Eismeier c5dcbe8c31 Propose fix some typos (#538) 2018-04-23 10:54:44 +02:00
Oliver Mueller 7e0b300e27 Issue/288 (#530)
* enhanced check "DBS-1816: mysql root user with empty password" to avoid false positived when authentication plugins are used

* fixed indent to spaces
2018-03-22 09:07:48 +01:00
Justin McAfee 9bd0a92980 Updated Sentence tense, replaced deprecated wait_for_keypress. (#532)
==========================
Changed words to match sentence tense. 
==========================
Removed reference to depracated "wait_for_keypress", replaced with WaitForKeyPress, Ln 351. per https://github.com/CISOfy/lynis/blob/master/include/functions
==========================
Contribution by Justin McAfee  (me [at] justinmcafee [dot] com)
2018-03-16 17:25:18 +01:00
Justin McAfee de75687e0a Change wait_for_keypress to WaitForKeyPress, Ln 83 (#534) 2018-03-16 17:24:29 +01:00
Michael Boelen 5d7fd65f85
Switch to development 2018-03-10 12:26:33 +01:00
Michael Boelen 40282cde49
[TIME-3160] improvements to detect step-ticker file and entries 2018-03-10 12:26:09 +01:00
James White 1d982a26d0 Add remi repo php.ini paths (#529) 2018-03-10 12:07:29 +01:00
Michael Boelen 692dfe9c6b
Release 2.6.3 2018-03-07 16:25:00 +01:00
Michael Boelen 37e9f4f400
Updated log 2018-03-05 11:43:42 +01:00
Michael Boelen a7845b6748
[NAME-4402] Enhanced test to filter out empty lines 2018-03-05 11:43:33 +01:00