Commit Graph

1067 Commits

Author SHA1 Message Date
Michael Boelen efebb99da1 Add action to take when a file has not the right permissions 2016-05-02 17:13:06 +02:00
Michael Boelen c806c59f77 Simplify checking of file permissions on tests_custom 2016-05-02 17:12:43 +02:00
Michael Boelen ee4bd4cb26 Added more guidelines for submitting patches 2016-05-02 17:12:19 +02:00
Michael Boelen 6ea27b912c Add owner and group permissions check 2016-05-02 15:45:27 +02:00
Michael Boelen 4bc0225efd Simplified file permission test 2016-05-02 15:44:52 +02:00
Michael Boelen cd93b3a6ef Align message block when using non-privileged scan 2016-05-02 15:38:10 +02:00
Michael Boelen 3a4a18e472 Determine if we warned user about weak file permissions 2016-05-02 15:36:31 +02:00
mboelen d4f71e6d42 Try creating a temporary log and report file in unprivileged mode 2016-05-02 15:13:37 +02:00
mboelen 73bcfccd20 Use variable OWNERID for file ownership 2016-05-02 15:08:38 +02:00
mboelen 17ba25a788 Updated log 2016-05-02 15:06:54 +02:00
mboelen 4493810df2 Change permission tests and messages 2016-05-02 15:04:54 +02:00
mboelen 6e2640c4d5 Retrieve SSH settings from active configuration and store earlier, test with lowercase settings for other tests 2016-05-02 15:04:40 +02:00
mboelen 9208e35f20 Added alias --no-plugins to skip plugins 2016-05-02 13:57:16 +02:00
mboelen a765163a25 Minor changes to identation and variable names 2016-05-02 13:26:27 +02:00
Eric Light bcaf7a55ef Remove wchan from PROC-3614, to finish #179 (#182)
Attempt number two, fixing the awk line this time  :)
2016-05-02 13:24:19 +02:00
StrangeBubble 81a4821636 Check if file is symlink or not (#184) 2016-05-02 13:23:43 +02:00
mboelen 4913caadbc Replaced old functions and do less logging to increase speed 2016-04-28 12:59:13 +02:00
mboelen 1a680c294f Replace incorrect function call to report 2016-04-28 12:58:33 +02:00
mboelen 534dc2e97d Update release date, replacing old function names 2016-04-28 12:58:03 +02:00
mboelen c1bee3b39d Import of systemd plugin as community plugin 2016-04-28 12:33:59 +02:00
mboelen 43f6baeb2e Replaced old function names with new ones 2016-04-28 12:32:18 +02:00
mboelen 42607ceaf5 Replaced old function names with new ones 2016-04-28 12:31:57 +02:00
mboelen 539bd49856 Big overhaul of functions file. Cleaning up, structurizing, and adding comments 2016-04-28 12:31:38 +02:00
mboelen 9e312f5a5f Replaced functions and minor cleanups 2016-04-28 09:15:54 +02:00
mboelen 5e587adf8a Change ntp_falseticker in report, added ntp_unreliable_peer 2016-04-28 08:51:43 +02:00
mboelen 1e0ca25405 Update log 2016-04-27 16:51:25 +02:00
mboelen f109c318d9 Detect when weak protocols are used, simplify nginx test 2016-04-27 16:51:12 +02:00
mboelen 1825d91c85 [HTTP-6710] Show suggestion when using a weak protocol 2016-04-27 16:37:32 +02:00
mboelen eb0206198a [HTTP-6710] Show SSLv3 as weak protocol 2016-04-27 16:36:24 +02:00
mboelen d6fa2bbd4c Initial import of developer profile, to be used like: lynis audit system --profile developer.prf 2016-04-27 16:18:46 +02:00
mboelen 7c4099a7da Call WaitForKeypress from wait_for_keypress, and report this old function when called to developers 2016-04-27 16:14:22 +02:00
mboelen f4691536ee Add nginx ssl_protocol values to report, minor adjustments to ReportDetails function 2016-04-27 16:09:29 +02:00
mboelen 2cab82f71f Replaced logtext and report with proper functions 2016-04-27 15:37:07 +02:00
mboelen b453190cd7 Added firewall_software[] to report 2016-04-27 10:52:45 +02:00
mboelen 84d619852a [PROC-3612] Removed wchan from output to solve issue with grsecurity-enabled kernel 2016-04-27 10:30:40 +02:00
mboelen 24e5e75611 Updated log 2016-04-26 21:27:58 +02:00
mboelen 6a4287bd64 Proper reference to IsDeveloperMode 2016-04-26 21:25:14 +02:00
mboelen b6884dfda3 Add file permission and ownership tests for cronjobs 2016-04-26 21:21:15 +02:00
mboelen c98b37955c Added IsOwnedByRoot function 2016-04-26 21:20:37 +02:00
mboelen 098a2e3760 Added istat binary 2016-04-26 21:20:17 +02:00
mboelen e20404c60b Add test for world-writable cronjobs 2016-04-26 14:06:27 +02:00
mboelen 7b33ead897 Adding aliases and optimization for value testing 2016-04-26 14:05:56 +02:00
mboelen 216611259e Optimize IsWorldWritable function, with additional debugging data for developers 2016-04-26 13:52:26 +02:00
mboelen 812a0ea270 Added developer-mode option for profiles 2016-04-26 13:51:54 +02:00
mboelen 55799a524c Added developer mode (--developer) 2016-04-26 13:40:21 +02:00
mboelen 2cefdb79d6 Log when a file is world-writable according IsWorldWritable 2016-04-26 13:34:17 +02:00
mboelen 4791b8a6bf Add scheduler[] and minor cleanups 2016-04-26 13:05:17 +02:00
mboelen 448fd65e31 Remove tab 2016-04-26 13:00:41 +02:00
mboelen 705e2444ee [SCHD-7702] Added test to check cron daemon status 2016-04-26 12:58:17 +02:00
mboelen ea9c40a36c Changed text to avoid showing up as a suggestion 2016-04-25 20:48:21 +02:00