Commit Graph

2018 Commits

Author SHA1 Message Date
Ismael Casimpan 2217ab1659 README.md: added 'cd lynis' as it's needed before you can execute ./lynis after git clone (#484) 2017-10-30 08:39:53 +01:00
Michael Boelen 4aa8046280
Switch to development version 2017-10-29 17:06:44 +01:00
Michael Boelen 748701035f
Updated log 2017-10-29 17:06:16 +01:00
Michael Boelen be82d80b02
Release 2.5.7 2017-10-29 16:55:55 +01:00
Michael Boelen e5c11991ef
Code enhancements and textual change 2017-10-29 11:26:25 +01:00
Michael Boelen ebf16462a8
Improve IsRunning function to match full process names 2017-10-29 10:54:40 +01:00
Michael Boelen 011e6248c2
Use full match for Little Snitch 2017-10-29 10:54:16 +01:00
Michael Boelen 764c18c218
Code enhancements, improve detection for Puppet 2017-10-29 10:52:42 +01:00
Michael Boelen 331422384a
Added --silent as parameter for --quiet 2017-10-29 10:26:18 +01:00
Ygor Maximo a20fd448ab Update pt (#482)
Fixed typos. Update made based on information from 'en' file
2017-10-29 10:21:44 +01:00
Michael Boelen 858f849c1a
Release 2.5.6 2017-10-27 12:50:58 +02:00
Michael Boelen d13cdda1e3
Filter only relevant messages for report 2017-10-26 08:23:15 +02:00
Michael Boelen 30aa00e7a8
Updated log 2017-10-24 14:16:13 +02:00
Michael Boelen b29732bf5f
Spacing and readability 2017-10-24 14:15:59 +02:00
Michael Boelen c5e014eaf4
Corrected description 2017-10-24 13:39:41 +02:00
James White 45748184a8 Add additional DirectAdmin paths for php.ini (#479) 2017-10-24 13:16:59 +02:00
Michael Boelen 539fe2242a
Merge branch 'master' of https://github.com/CISOfy/lynis 2017-10-19 19:38:36 +02:00
Michael Boelen 8e71974f0b
Updated log 2017-10-19 19:38:01 +02:00
Michael Boelen 9d238f6e78
Added HP-UX routine for GetHostID 2017-10-19 19:37:25 +02:00
dataking 099c3b4468 fix for issue #453; simply add RPi/Raspian path to PAM_FILE_LOCATIONS (#475) 2017-10-19 11:33:09 +02:00
Katarina Durechova db8f259676 Fix links CONTRIBUTIONS -> CONTRIBUTING (#472) 2017-10-19 09:56:37 +02:00
aolivac ac524617e5 replace invalid quotes ,error lynis/db/languages/es: Syntax error: Unterminated quoted string (#477) 2017-10-19 09:55:52 +02:00
vins1993 6a74a8727f Fix displayed result for signing keys check (#466)
The result of the signing keys check is saved under KEYS_USED variable,
but SSL_USED was used to present the result to the end user.
2017-09-21 15:09:57 +02:00
Michael Boelen d2dfb6d43a
Updated log 2017-09-18 19:50:52 +02:00
Michael Boelen 19bbc4272f
[SHLL-6220] Improved detection of shell settings like TMOUT 2017-09-18 19:50:41 +02:00
Michael Boelen 76b4afb14d
[SSH-7408] set default 'delayed' compression as a sane value 2017-09-18 19:18:11 +02:00
Michael Boelen 053535ec37
Updated log 2017-09-18 19:17:45 +02:00
Michael Boelen 5768d39e16
Updated translations 2017-09-18 08:01:00 +02:00
Michael Boelen c3f3e22290
Show language in output 2017-09-17 20:15:57 +02:00
Michael Boelen 01a806dd45
Extended and activated languages 2017-09-17 20:15:39 +02:00
Michael Boelen 9acbd039a3
Updated log 2017-09-17 20:03:26 +02:00
Jesus Christian Cruz Acono 159477ca6d Update es (#464)
added more strings
2017-09-17 20:02:22 +02:00
Michael Boelen 94f656bf65
Add 127.0.1.1 to NETW-2704 test 2017-09-17 20:01:07 +02:00
Michael Boelen 6aecde7e14
Updated log 2017-09-16 14:25:18 +02:00
Michael Boelen 3670e0c5c9
Minor changes to using local resolvers 2017-09-16 14:25:01 +02:00
Michael Boelen 83ce145f1b
Merge branch 'master' of https://github.com/CISOfy/lynis 2017-09-16 14:10:20 +02:00
Ben Abrams 192cc494ed [NETW-2705] This is related to #437 and resolvconf but is split up. (#459)
This specifically makes it so that when `/etc/resolv.conf` has one or more nameservers matching `127.0.[0-1].1` it should not warn as it is using local resolvers.

We are simply using `grep -c "127.0.[0-1].1" /etc/resolv.conf` to determine this.
2017-09-16 14:09:32 +02:00
Michael Boelen 11f81345ee
Code enhancement 2017-09-16 14:08:38 +02:00
Michael Boelen 499f7d5015
Improve process detection 2017-09-16 14:08:26 +02:00
FlorentCoppint ccf9db18f8 Improved IsRunning() process matching (#463) 2017-09-16 13:58:04 +02:00
Michael Boelen 79278c32ef
Added extra legal words for banners 2017-09-12 15:23:37 +02:00
Michael Boelen 6199d26861
Change to development 2017-09-12 15:23:22 +02:00
Michael Boelen daeec982ab
Release 2.5.5 2017-09-07 10:28:19 +02:00
Michael Boelen c248ab6a16
[CRYP-7902] fix for bourne shell and rewrite 2017-09-06 12:56:32 +02:00
Michael Boelen 2451029a6e
Allow for files with spaces 2017-09-06 12:55:56 +02:00
Michael Boelen 61d28ac73c
Start development of 2.5.5 2017-09-06 12:55:31 +02:00
Michael Boelen 72dc0de32b
Release 2.5.4 2017-09-05 13:30:32 +02:00
Michael Boelen 77400d3952
Improve logging 2017-09-05 13:29:21 +02:00
Brian Ginsbach 30c58dd1ed Don't assume sshd version is in first line (#452)
There are some versions of OpenSSH where the version information
isn't in the first line (like NetBSD's with the HPN patches).
2017-09-04 15:33:28 +02:00
Brian Ginsbach 8e97fc5625 Various PAM cleanups for FreeBSD, NetBSD, and macOS. (#454)
* Use PAM_DIRECTORY variable where appropriate

* Skip checking FreeBSD/NetBSD pam.d/README as a PAM file

FreeBSD and NetBSD install a README file in /etc/pam.d.  Attempting
to check this file as a PAM file just generates a lot of garbage
exceptions in the log.

* Handle 'include' as a PAM control-flag

OpenPAM and some versions of Linux PAM can have a configuration
where the control-flag is 'include'.  Skip further processing as
these files will be processed separately.

* Add missing commonly seen specific PAMs

Add some missing commonly seen specific PAMs from FreeBSD, NetBSD,
and OS X/macOS. The OS X/macOS PAMs were taken from a 10.5 (Leopard)
and 10.10 (Yosemite) system respectively.

Both FreeBSD and NetBSD come with a pam_ssh PAM.  Add a warning
when found confitured as it presents a potential security risk (see
pam_ssh(8) on FreeBSD/NetBSD).
2017-09-04 15:32:57 +02:00