1
0
mirror of https://github.com/CISOfy/lynis.git synced 2025-04-08 17:15:25 +02:00

1922 Commits

Author SHA1 Message Date
Michael Boelen
72dc0de32b
Release 2.5.4 2.5.4 2017-09-05 13:30:32 +02:00
Michael Boelen
77400d3952
Improve logging 2017-09-05 13:29:21 +02:00
Brian Ginsbach
30c58dd1ed Don't assume sshd version is in first line ()
There are some versions of OpenSSH where the version information
isn't in the first line (like NetBSD's with the HPN patches).
2017-09-04 15:33:28 +02:00
Brian Ginsbach
8e97fc5625 Various PAM cleanups for FreeBSD, NetBSD, and macOS. ()
* Use PAM_DIRECTORY variable where appropriate

* Skip checking FreeBSD/NetBSD pam.d/README as a PAM file

FreeBSD and NetBSD install a README file in /etc/pam.d.  Attempting
to check this file as a PAM file just generates a lot of garbage
exceptions in the log.

* Handle 'include' as a PAM control-flag

OpenPAM and some versions of Linux PAM can have a configuration
where the control-flag is 'include'.  Skip further processing as
these files will be processed separately.

* Add missing commonly seen specific PAMs

Add some missing commonly seen specific PAMs from FreeBSD, NetBSD,
and OS X/macOS. The OS X/macOS PAMs were taken from a 10.5 (Leopard)
and 10.10 (Yosemite) system respectively.

Both FreeBSD and NetBSD come with a pam_ssh PAM.  Add a warning
when found confitured as it presents a potential security risk (see
pam_ssh(8) on FreeBSD/NetBSD).
2017-09-04 15:32:57 +02:00
Tom Reynolds
41174afda6 Do not limit debsums to Debian systems ()
Debsums is supported on Debian and other systems as per GitHub issue . 
Undo commit d1969001c6df84ea58c7913140a7a03f6b2486a1.
2017-09-04 15:30:25 +02:00
Michael Boelen
92d53581f9
Updated log 2017-09-01 16:24:44 +02:00
bruberg
9ddf9e7335 Add Norwegian language file () 2017-09-01 16:23:39 +02:00
Michael Boelen
0fc8adb3c5
When providing suggestion related to hostid, append to file instead of overwriting 2017-08-31 17:11:15 +02:00
Michael Boelen
769b1f49e2
Detection of Linux Mint missed right field 2017-08-31 17:04:17 +02:00
tobiasfielitz
5aaf81c267 removed "update release" from menu () 2017-08-30 19:12:51 +02:00
Bruno Vernay
6cf1c324f8 Support spaces in file names ()
* Support spaces in file names

File names may contain spaces

* Fixed 2more cases
2017-08-29 14:33:18 +02:00
Bruno Vernay
4107d8a461 Support spaces in file names ()
File names may contain spaces
2017-08-29 14:32:42 +02:00
Michael Boelen
de65787b3a
Merge branch 'master' of https://github.com/CISOfy/lynis 2017-08-19 10:55:40 +02:00
Michael Boelen
81a54da6b8
Updated log 2017-08-19 10:55:13 +02:00
Brian Ginsbach
3512068a49 [PKGS-7380] Fix NetBSD packages vulnerabilities file name ()
* [PKGS-7380] Fix NetBSD packages vulnerabilities file name

* OS Detection: Add early Mac OS X releases
2017-08-19 10:53:25 +02:00
Michael Boelen
e4472b357c
Updated log 2017-08-19 10:51:16 +02:00
Michael Boelen
d682673c63
Preparations for APT 2017-08-19 10:51:06 +02:00
Michael Boelen
06491a5b4f
Linux Mint detection 2017-08-19 10:50:53 +02:00
Michael Boelen
1190efac2b
[CRYP-7902] add a test to filter out non-certificate files 2017-08-18 19:19:15 +02:00
Michael Boelen
4a673aebc7
[CRYP-7902] certificate validation changed 2017-08-18 14:14:28 +02:00
Michael Boelen
f60db7d950
Updated log 2017-08-18 14:14:01 +02:00
Michael Boelen
ce663936c3 Create CODE_OF_CONDUCT.md 2017-08-17 20:37:37 +02:00
Michael Boelen
50ed503916
Rename of file to preferred naming 2017-08-17 20:34:10 +02:00
Michael Boelen
011639bc60
Textual improvement 2017-08-17 20:30:08 +02:00
Michael Boelen
5b0f87b4ea
Updated log 2017-08-17 20:29:03 +02:00
Michael Boelen
00648a636c
Improve systemd detection 2017-08-17 20:28:32 +02:00
Michael Boelen
c0a6aaf855
[TOOL-5002] performance enhancement to reduce number of dirs/files to check 2017-08-17 20:10:51 +02:00
Michael Boelen
0caf42bc51
Switch to 2.5.4 development 2017-08-17 20:06:58 +02:00
Michael Boelen
5be81289ee
[TOOL-5002] rewrite of Ansible detection 2017-08-17 20:06:41 +02:00
Michael Boelen
83da68fdb5
Release 2.5.3 2.5.3 2017-08-17 14:27:41 +02:00
Michael Boelen
43228c2ca7
[TOOL-5002] Ansible detection added 2017-08-17 14:20:54 +02:00
Michael Boelen
358dc46b81
Ignore file access errors when trying to access them 2017-08-17 14:18:29 +02:00
Michael Boelen
77ebb23320
[HRDN-7230] Show single line when no malware scanner was detected 2017-08-17 14:17:57 +02:00
Lukas Pirl
b3dffbf750 remove test for deprecated sshd option UsePrivilegeSeparation ()
see also https://www.openssh.com/txt/release-7.5
2017-08-16 20:33:33 +02:00
Tom H
3adeac922e Do not unset PHPVERSION after detect it () 2017-08-16 20:33:11 +02:00
Jason Soto
5b81f625a6 Added php.ini locations for Ubuntu 16.04LTS () 2017-08-16 20:32:55 +02:00
Michael Boelen
be1e8fcc70
Updated log 2017-08-08 14:54:01 +02:00
Michael Boelen
a547953d99
Set default log directory, or allow it be set per OS 2017-08-08 14:52:59 +02:00
Michael Boelen
4660362e74
Redirect errors like file permissions 2017-08-08 14:52:11 +02:00
Michael Boelen
0c5b9b8148
Updated log 2017-08-03 20:28:53 +02:00
Michael Boelen
49c1bf8d55
[NETW-3006] Updated detection of MAC addresses on Linux 2017-08-03 20:28:38 +02:00
Michael Boelen
4781b1c170
Added /opt/apache 2017-08-02 13:01:23 +02:00
Michael Boelen
7027105b2f
Updated log 2017-07-31 12:54:33 +02:00
Stéphane BARBARAY
9ca2d640b8 Enhanced detection for LXC and LXC over VM ()
* Update functions

* Update functions

* Update tests_shells

* Update tests_shells

* Update IsVirtualMachine

extra check on /proc/1/environ existence + Log result
2017-07-31 12:51:19 +02:00
Michael Boelen
22d76b0d01
Updated log 2017-07-28 10:42:41 +02:00
Michael Boelen
dbec83566b
[FILE-6310] match mount points by exact name 2017-07-28 10:42:17 +02:00
Michael Boelen
ebc706aa64
Merge branch 'master' of https://github.com/CISOfy/lynis 2017-07-28 10:26:34 +02:00
alobodzinski
6147ebd47b Suhosin is hard linked into PHP on OpenBSD () 2017-07-28 10:14:04 +02:00
Michael Boelen
34ae5cfdd8
Updated log 2017-07-18 11:51:59 +02:00
Michael Boelen
60f94fef47
[CRYP-7902] prevent test from showing error on screen related to wrong certificate file 2017-07-18 11:51:45 +02:00