tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,381 Commits 2 Branches 63 Tags 18 MiB
Commit Graph

486 Commits

Author SHA1 Message Date
Topi Miettinen fcdc07f8d9
[CRYP-7902] Check also certificates in DER format 
Check also certificates in DER (*.cer, *.der) format. Add
/etc/refind.d/keys to list of certificate paths.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-04-25 00:06:58 +03:00
Michael Boelen ce3c80b44f
Merge pull request #883 from topimiettinen/check-encrypted-swap-devices 
Check if system uses encrypted swap devices
 2020-04-12 16:22:22 +02:00
Topi Miettinen de848cb76a
Check for registered non-native binary formats 
Examine /proc/sys/fs/binfmt_misc (Linux) for additional registered
binary formats. Those are probably emulated and their emulation could
be less tested, more buggy and more vulnerable than native binary
formats, so they should be disabled when not needed.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-04-10 12:54:48 +03:00
Michael Boelen a166691199
Merge pull request #882 from topimiettinen/check-package-certificates 
[CRYP-7902] Check also certificates provided by packages
 2020-04-09 11:01:39 +02:00
Michael Boelen 1163648d89
Merge pull request #896 from Schmuuu/feature/raspi-detect-required-reboot 
extended test KRNL-5830 to detect required reboots on Raspbian
 2020-04-09 09:58:48 +02:00
Michael Boelen c368846a08
Added support to require a detected and known package manager 2020-04-06 20:47:45 +02:00
Michael Boelen 798f5322f6
Updated log 2020-04-06 16:23:31 +02:00
Michael Boelen 032bb6988e
Added new test NETW-2400 2020-04-04 15:28:04 +02:00
Michael Boelen 235dbd3805
Updated log 2020-04-03 09:50:03 +02:00
Michael Boelen e2ad71ffe5
Updated log 2020-04-03 09:46:56 +02:00
Kristian S 52b72e7b0f extended test KRNL-5830 to detect required reboots on Raspbian 2020-04-02 21:45:40 +02:00
Michael Boelen 38a5c2cb79
Added new test PHP-2382 2020-04-02 19:46:58 +02:00
Michael Boelen 64033da973
Updated log 2020-04-02 14:46:42 +02:00
Michael Boelen 1996b7e0c6
Updated log 2020-04-02 13:14:51 +02:00
Topi Miettinen 9642bcffc8
[CRYP-7902] Optionally check also certificates provided by packages 
The package maintainers are not immune to mistakes or they might not
always provide timely updates, so let's check (optionally) more
certificates even if they are delivered by packages.

I found three expired certificates in my Debian/unstable system,
thanks to changed Lynis.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-04-02 12:52:13 +03:00
Michael Boelen 2c4ed62ef6
Updated log 2020-04-01 16:32:59 +02:00
Michael Boelen c309ad7bdc
Updated log 2020-04-01 16:19:54 +02:00
Michael Boelen 5f13de96a4
Updated log 2020-03-31 16:25:33 +02:00
Michael Boelen 9a1bbbc69a
Updated log 2020-03-30 16:08:31 +02:00
Topi Miettinen 5c5cc43c6f
Check if system uses encrypted swap devices 
Add test CRYP-7931 to check if the system uses any encrypted swap
devices.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-27 13:05:56 +02:00
Michael Boelen daa9c42ec0
Updated log 2020-03-25 15:19:30 +01:00
Michael Boelen 5e821687af
Added new tests 2020-03-24 13:33:24 +01:00
Michael Boelen 1d9a887406
Updated log 2020-03-24 13:25:22 +01:00
Topi Miettinen 8913374092 Run 'systemd-analyze security' 
'systemd-analyze security' (available since systemd v240) makes a nice
overall evaluation of hardening levels of services in a system. More
details can be found with 'systemd-analyze security SERVICE' for each
service.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
 2020-03-23 17:31:32 +02:00
Michael Boelen 08f57c557d
Updated log 2020-03-23 13:20:41 +01:00
Michael Boelen 4e35b91ab2
Updated log 2020-03-23 12:50:31 +01:00
Michael Boelen 17ac4d2c1c
[AUTH-9252] corrected permission check 2020-03-23 10:44:45 +01:00
Michael Boelen a067c4211a
Updated log 2020-03-22 15:16:31 +01:00
Michael Boelen f342669777
Updated log 2020-03-21 18:53:05 +01:00
Michael Boelen 6356b3adb1
Updated log 2020-03-20 19:43:18 +01:00
Michael Boelen 626e2a9ab9
Updated log 2020-03-20 14:13:21 +01:00
Michael Boelen 1f3467f69a
Updated log 2020-03-20 09:47:57 +01:00
Michael Boelen ddcf9bc713
[BOOT-5122] check for defined password in all GRUB configuration files 2020-03-19 15:52:03 +01:00
Michael Boelen 00a31c6dbd
Updated log 2020-03-19 15:29:01 +01:00
Michael Boelen e5c1f2f303
Updated log 2020-03-19 11:01:22 +01:00
Michael Boelen cc78713c6a
Updated log 2020-03-18 11:43:29 +01:00
Michael Boelen eaafbb642e
Updated log 2020-03-18 11:37:06 +01:00
Michael Boelen 6e3e93d585
[PKGS-7388] only perform check for Debian, Mint, Ubuntu 2020-03-17 16:05:14 +01:00
Michael Boelen 77dd0e0bbe
Merge pull request #853 from deltablot/php 
Skip the PHP cli configuration file when looking for expose_php
 2020-03-17 14:02:51 +01:00
Michael Boelen d1db448c51
Skip pacman when it is the game instead of package manager 2020-03-17 13:02:59 +01:00
Michael Boelen 7a1719ef75
Updated log 2020-03-12 16:01:19 +01:00
Michael Boelen 30a456c5f4
Updated log 2020-03-11 15:56:32 +01:00
Nicolas CARPi 0593c69f2f Skip the PHP cli configuration file when looking for expose_php 
The expose_php configuration option is only relevant for non-cli PHP and
thus lynis should not look for it in config files that are for cli

Fix #849
 2020-03-05 00:53:27 +01:00
Michael Boelen 24ca3c2045
Updated log 2020-03-04 19:38:22 +01:00
Michael Boelen 4d1a170e84
Updated log 2020-03-04 15:03:23 +01:00
Michael Boelen d81cc71790
Updated log 2020-02-15 14:10:48 +01:00
Michael Boelen 66b8eb3000
Updated log 2019-12-18 19:20:57 +01:00
Michael Boelen 4381382d7e
Updated log 2019-12-18 12:23:59 +01:00
Michael Boelen d5bc4f7854
Updated log 2019-12-18 12:17:55 +01:00
Michael Boelen 7f4274bee5
Added log 2019-12-17 08:24:04 +01:00
Michael Boelen 700e0823de
Updated log 2019-12-13 12:36:50 +01:00
Michael Boelen f93be8a44d
Updated log 2019-12-06 09:49:14 +01:00
Michael Boelen 189b7a04ba
Updated log 2019-11-18 10:21:21 +01:00
Michael Boelen 52e1231433
Additional check to ensure pacman package manager is used instead of pacman game 2019-10-08 16:43:09 +02:00
Michael Boelen 87f5596952
Added new test DBS-1828 2019-10-08 15:15:18 +02:00
Michael Boelen a1b6d463b2
Fixed a typo 2019-09-21 16:31:06 +02:00
Michael Boelen 60a76d64a3
Updated log 2019-09-13 11:47:50 +02:00
Michael Boelen 7d33353058
Updated log 2019-09-12 16:37:15 +02:00
Michael Boelen b7445e8d64
Updated log 2019-09-12 11:18:37 +02:00
Michael Boelen ca5216caf9
Updated log 2019-09-12 11:17:56 +02:00
Michael Boelen 0088593506
Updated log 2019-09-03 10:55:14 +02:00
Michael Boelen a87c2b10f9
Added CRYP-8002 2019-08-29 10:39:43 +02:00
Michael Boelen a889860798
Updated log 2019-08-28 15:37:49 +02:00
Michael Boelen aa58736bd5
Updated log 2019-08-26 20:26:23 +02:00
Michael Boelen d2deb63ebb
Added NETW-3200 2019-08-22 14:12:53 +02:00
Michael Boelen b7641cc16a
Updated log 2019-08-21 14:54:01 +02:00
Michael Boelen 7eba5df9b2
Updated log 2019-08-21 14:08:25 +02:00
Michael Boelen bc6d294b91
Updated log 2019-08-20 16:01:18 +02:00
Michael Boelen f51f19f621
Updated log 2019-08-17 16:49:23 +02:00
Michael Boelen e5b8047133
Added data and detection of Amazon Linux 2019-08-13 22:00:30 +02:00
Michael Boelen 3e392c8e6c
Added end-of-life data for Arch Linux (rolling) 2019-08-13 21:40:29 +02:00
Michael Boelen 7dba2dfd9d
Updated log 2019-08-13 20:02:56 +02:00
Michael Boelen 06f015fbae
Updated log 2019-08-04 19:19:22 +02:00
Michael Boelen fb33112555
Updated log 2019-07-26 20:07:24 +02:00
Michael Boelen 3859ce90f4
Updated log 2019-07-26 16:14:35 +02:00
Michael Boelen 7d6118f4a6
Updated log 2019-07-26 15:34:45 +02:00
Michael Boelen 75d75d590b
Updated log 2019-07-26 11:59:28 +02:00
Michael Boelen ce8c9f44a0
Updated log 2019-07-26 11:32:55 +02:00
Michael Boelen b384fa2887
New option: --usecwd to run from current working directory 2019-07-25 11:34:58 +02:00
Michael Boelen 022f427a69
Updated log 2019-07-18 11:54:29 +02:00
Michael Boelen 62c5e5b881
Updated log 2019-07-18 11:33:43 +02:00
Michael Boelen 2576bc8fca
Updated log 2019-07-16 19:11:07 +02:00
Michael Boelen b935ab8b6a
Updated log 2019-07-16 13:23:00 +02:00
Michael Boelen 2777caf6d2
Updated log 2019-07-16 13:13:35 +02:00
Michael Boelen 95db1dc145
Updated log 2019-07-15 20:05:08 +02:00
Michael Boelen b1937029fe
Updated log 2019-07-15 19:39:14 +02:00
Michael Boelen 0d21ba5e52
Updated log 2019-07-15 19:12:46 +02:00
Michael Boelen 7728213ac4
Merge branch 'master' into docu 2019-07-15 18:55:10 +02:00
Michael Boelen 5cc5ecf534
Updated log 2019-07-14 15:13:02 +02:00
Michael Boelen 5fdd00783e
Updated log 2019-07-14 13:41:02 +02:00
Michael Boelen c179a0e563
Updated log 2019-07-14 13:36:56 +02:00
Michael Boelen ea67b779c7
Updated log 2019-07-14 13:19:18 +02:00
Michael Boelen 819f310750
Updated log 2019-07-14 13:06:53 +02:00
David 65e288b3c7
Fix typo in changelog 2019-07-14 11:46:25 +02:00
Michael Boelen 6b21bead53
Updated log 2019-07-14 08:43:13 +02:00
Michael Boelen f588e3af4e
Updated log 2019-07-14 08:28:58 +02:00
Michael Boelen 3c076fd8de
Updated log 2019-07-13 20:09:32 +02:00
Michael Boelen 9600119677
Updated log 2019-07-13 20:04:36 +02:00
Michael Boelen f8e9c7bd91
Updated log 2019-07-12 14:39:05 +02:00
Michael Boelen 21f9a18e8b
Updated log 2019-07-10 20:22:38 +02:00
Michael Boelen 7650dd441d
Updated log 2019-07-09 11:18:12 +02:00
Michael Boelen 9533d6fc7a
Updated log 2019-07-09 10:34:07 +02:00
Michael Boelen 841509465b
Updated log 2019-07-08 15:10:32 +02:00
Michael Boelen 9364baa4fa
Updated log 2019-07-07 18:51:49 +02:00
Michael Boelen 13fbfff8bc
Updated log 2019-07-03 15:40:16 +02:00
Michael Boelen 1f0c31fcad
Preparing for release 3.0.0 2019-07-03 15:08:35 +02:00
Michael Boelen 901e697fc2
Release 2.7.5 2019-06-24 15:47:07 +02:00
Michael Boelen cf57424f1a
Preparing 2.7.5 release 2019-06-17 12:18:08 +02:00
Michael Boelen dc2962955e
Updated log 2019-04-21 16:30:04 +02:00
Michael Boelen ae1a6d1e9d
Release 2.7.4 2019-04-21 16:19:12 +02:00
Michael Boelen b4f2992476
Updated log 2019-04-20 14:31:41 +02:00
Michael Boelen 70e985bfcb
Updated log 2019-04-17 15:26:54 +02:00
Michael Boelen 7c03e5b8b6
Updated log 2019-04-15 19:30:31 +02:00
Michael Boelen 5e8e2c5f83
Updated log 2019-04-15 19:21:51 +02:00
Michael Boelen a881c803e2
Updated date and log 2019-04-13 13:28:13 +02:00
Michael Boelen 6bc2aefbd4
Updated log 2019-04-09 08:26:24 +02:00
Michael Boelen 15c942ac24
Updated log 2019-04-09 06:51:47 +02:00
Michael Boelen 3516ce9de1
Updated log 2019-04-07 19:03:28 +02:00
Michael Boelen 1a1d736fa7
Updated log 2019-04-07 15:53:04 +02:00
Michael Boelen ef0b5b7641
Updated log 2019-04-04 19:05:02 +02:00
Michael Boelen 28fd5948f7
Updated log 2019-04-04 14:41:56 +02:00
Michael Boelen 349f011489
Updated log 2019-04-02 11:14:56 +02:00
Michael Boelen abaed3e6c1
Updated log 2019-03-29 12:53:52 +01:00
Michael Boelen c36917ae83
Updated log 2019-03-29 12:32:08 +01:00
Michael Boelen 20da48bdfe
Switch to development version 2019-03-29 12:24:01 +01:00
Michael Boelen 09e2de2ea5
Release 2.7.3 2019-03-21 09:35:30 +01:00
Michael Boelen 888df98af4
Updated log 2019-03-19 13:06:31 +01:00
Michael Boelen 306d9eaab6
Updated log 2019-03-15 14:24:42 +01:00
Michael Boelen a350dfec1b
Updated log 2019-03-15 14:01:48 +01:00
Michael Boelen b6b1f10901
Updated log 2019-03-15 13:53:06 +01:00
Michael Boelen dac92d27bb
Updated log 2019-03-14 13:15:32 +01:00
Michael Boelen 820666f448
Updated log 2019-03-14 12:33:35 +01:00
Michael Boelen a4b179e4ef
Switch to development for 2.7.3 2019-03-07 12:11:33 +01:00
Michael Boelen 0154473219
Release 2.7.2 2019-03-07 11:55:21 +01:00
Michael Boelen 9b5ef7c80f
Updated log 2019-03-05 19:30:53 +01:00
Michael Boelen 1214c24363
Updated log 2019-03-04 12:33:50 +01:00
Michael Boelen ab9a53169b
Updated log 2019-02-28 10:20:26 +01:00
Michael Boelen 7ae90d6405
Updated log 2019-02-26 16:16:35 +01:00
Michael Boelen 672677bae1
Release 2.7.1 2019-01-31 14:49:12 +01:00
Michael Boelen 7d3ba95854
Updated log 2019-01-31 14:27:45 +01:00
Michael Boelen d2c03c05df
Updated log 2018-12-31 10:03:34 +01:00
Michael Boelen 0b6a14b643
Updated log 2018-12-29 17:10:15 +01:00
Michael Boelen c7eb855ff0
Updated log 2018-12-17 09:59:28 +01:00
Michael Boelen 40f3770453
Updated log 2018-12-14 13:22:42 +01:00
Michael Boelen 18b2745bab
Updated log 2018-12-14 13:18:10 +01:00
Michael Boelen ae0915899e
Updated log 2018-12-13 12:14:51 +01:00
Michael Boelen 0308823966
Switch to development release 2018-10-30 13:39:59 +01:00
Michael Boelen 57cd296f63
Release 2.7.0 2018-10-26 14:25:02 +02:00
Michael Boelen 0e5740efbb
Updated log 2018-10-23 17:15:06 +02:00
Michael Boelen 43b8f2a333
Updated log 2018-10-23 13:00:46 +02:00