tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,013 Commits 2 Branches 61 Tags 16 MiB
Commit Graph

1013 Commits

Author SHA1 Message Date
mboelen e5790dc8c6 Added: lynis show tests skipped (skipped tests) 2016-04-25 15:49:45 +02:00
mboelen 021fd8a98c Reduce debugging for PAM plugin 2016-04-25 15:49:21 +02:00
mboelen ba0381a775 Lowercase all tests when using them in comparisons 2016-04-25 15:49:00 +02:00
mboelen c02ab08b50 Set quiet and quickmode when using --show-warnings-only or show-warnings-only 2016-04-25 11:51:37 +02:00
mboelen bedadd9cd1 Do not show text on screen in quiet mode 2016-04-25 11:13:27 +02:00
mboelen 22cb6d6523 Updated man page with new options 2016-04-25 11:10:39 +02:00
mboelen 2f07fa1d87 Allow show-warnings-only and --(show-)warnings-only option 2016-04-25 11:10:23 +02:00
mboelen 3e20c1e30b [KRNL-5788] Improvements for grsecurity kernels 2016-04-25 10:56:11 +02:00
mboelen 0f64d106b1 Changed supporting text for ReportManual function 2016-04-25 10:55:34 +02:00
mboelen eae8ef99a4 Exit with exit code 0 by default, unless error-on-warnings is being used 2016-04-25 10:18:09 +02:00
mboelen a3075d2e8f Added error-on-warnings 2016-04-25 10:17:14 +02:00
mboelen 32da184947 Add new hints to the database 2016-04-25 10:16:57 +02:00
Eric Light bcdca90942 Update KRNL-5788 for grsecurity (#178) 
* If grsec installed, build FINDKERNEL from uname -r

When running a grsecurity-patched custom kernel, the /vmlinuz link is often missing.  If this link is missing, and grsecurity is installed, then we can calculate the location of FINDKERNEL with the words "linux-image-", plus the output of "uname -r".

* Suggest manually checking kernel if grsec installed

We can't rely on the apt-cache output when running grsecurity.  This is because apt-cache can't tell us if we're running an up-to-date kernel, when it's a custom kernel with grsecurity.  Instead of confirming that the kernel is OK, we instead should remind the auditor to double-check themselves.
 2016-04-25 09:34:14 +02:00
Eric Light c0f86fef09 Minor reword ("latest" -> "latest installed") (#174) 2016-04-25 09:33:55 +02:00
mboelen 904da4d123 Allow additional profile with --profile 2016-04-23 17:55:32 +02:00
mboelen 7823cf60f5 Changed text when no auditor name is specified 2016-04-23 17:42:40 +02:00
mboelen b336304ae6 Identation of help text 2016-04-23 17:06:10 +02:00
mboelen 998e63535c Changed colors and text of default help 2016-04-23 17:00:42 +02:00
mboelen cdebe9dc06 Update date 2016-04-21 11:45:59 +02:00
mboelen 60a7abf877 [PKGS-7354] Test for DNF repoquery plugin before using it 2016-04-21 11:44:42 +02:00
mboelen 821be1ea0c Remove color between categories, to prevent new users missing that on white background 2016-04-20 14:14:10 +02:00
mboelen 560acfadf6 Log what particular atomic test has been skipped and why 2016-04-20 12:08:34 +02:00
mboelen 5757837e28 Show skipped items when running in verbose mode 2016-04-20 12:08:10 +02:00
Eric Light a6393bd8a0 Display skipped atomic tests (#169) 
Added section to log & display skipped atomic tests.
 2016-04-20 10:46:40 +02:00
mboelen 11c4779dd7 Updated log 2016-04-19 21:12:54 +02:00
mboelen f915df67d1 Add --verbose option 2016-04-19 21:11:42 +02:00
mboelen 4f2ae07fd4 Show program details when being verbose 2016-04-19 21:09:48 +02:00
mboelen b1403aac20 Only show specific status of services when using --verbose 2016-04-19 21:09:27 +02:00
mboelen 5996dcdc95 Add verbose option to profiles 2016-04-19 19:47:50 +02:00
mboelen f0e7b531cd Add --verbose option 2016-04-19 19:46:20 +02:00
mboelen 64561d4b07 Add IsDebug and IsVerbose functions 2016-04-19 19:44:23 +02:00
mboelen d54f3ae307 Collect more ideas for improving the show command 2016-04-19 19:43:51 +02:00
mboelen f1a5c41b87 Add note and changed example of quick 2016-04-19 19:43:25 +02:00
mboelen c1f0b5e8b0 Allow usage of quick=yes in profile 2016-04-19 18:01:48 +02:00
mboelen c2d5d93fad Colored output for debug details on screen 2016-04-19 18:01:16 +02:00
mboelen 1f0261f168 Add details to AddHP function 2016-04-19 17:48:06 +02:00
mboelen 166c35bc69 Change color when UEFI is disabled 2016-04-19 17:45:46 +02:00
mboelen 2a22e5c42a Renamed logtext and report function calls 2016-04-19 17:43:33 +02:00
mboelen 11d0dabf4f [FILE-6372] Ignore comments in /etc/fstab 2016-04-19 17:39:01 +02:00
mboelen 5aa1a27e32 Cleanup 2016-04-19 17:36:53 +02:00
mboelen 6d512f48ac Improved text for assigning hardening points 2016-04-19 17:35:45 +02:00
mboelen a2514f20e1 Improve logging to state what directory will be scanned 2016-04-19 17:25:25 +02:00
mboelen a3ae0a450a No breaks betweens directories 2016-04-19 17:24:08 +02:00
mboelen 2d7ef97605 Consider binaries check as a core test 2016-04-19 17:23:12 +02:00
mboelen a23758e21f Replace = signs to simplify parsing of data 2016-04-19 13:56:28 +02:00
mboelen 3008727ce0 Log exit code of upload activities 2016-04-19 13:56:00 +02:00
mboelen a4c34aa042 Added new features 2016-04-19 12:39:23 +02:00
mboelen 2886ad0b7e Allow skipping of tests 2016-04-19 12:38:00 +02:00
mboelen a2594fc370 [SSH-7408] Allow skipping some of the SSH tests 2016-04-19 12:37:40 +02:00
mboelen e9eae5b8b5 Allow skipping of individual tests or atomic tests 2016-04-19 12:37:00 +02:00