Michael Boelen
66066ae226
Changed year and preparing for new release
2019-01-31 14:47:35 +01:00
theycallhimpat
0f32d2725c
Fix printed error when wget comes from busybox ( #602 )
...
Busybox's wget does't provide the -V parameter to get the version, so
redirect stderr to /dev/null to hide the printed error message
2018-12-17 09:53:27 +01:00
Deon Spengler
72796f5757
Added support for TOMOYO Linux Mandatory Access Control ( #589 )
...
* Added binary for TOMOYO Linux
* Added support for TOMOYO Linux Mandatory Access Control
2018-10-17 14:20:52 +02:00
Michael Boelen
c53072e31e
Ensure a parent directory with binaries is scanned - issue #517 on GitHub
2018-02-06 10:45:41 +01:00
Michael Boelen
7b664a7560
Reverse PATH search
2018-01-25 19:43:51 +01:00
Michael Boelen
3a4bc4db9c
Use binary paths from both PATH and predefined list to improve detection on all platforms
2018-01-25 19:14:58 +01:00
Dave Vehrs
8f689d4723
Adding USBGuard to checks for USB Devices. ( #499 )
...
* Added kernel.dmesg_restrict to sysctl checks.
* Initial addition of tests_usb_devices
* More updates for tests_usb_devices
* More updates
* Updated logging and other output.
2018-01-24 19:29:50 +01:00
Michael Boelen
3957ca32cd
Minor code enhancements
2018-01-18 16:23:23 +01:00
Michael Boelen
173068b402
Added getcap and grpck back
2018-01-18 11:10:11 +01:00
Michael Boelen
4f751c9037
Remove service manager reference from systemctl, minor cleanup
2018-01-18 10:23:39 +01:00
Michael Boelen
182ce09bc1
Additional code enhancements
2018-01-18 09:19:06 +01:00
mslifcak
173843bdfd
Pin svc mgr ( #506 )
...
* systemctl does not mean systemd is used
* Check for systemd active
* determine service manager if not already set
2018-01-17 15:56:19 +01:00
Michael Boelen
9ba5d200ad
Enhancements to reduce file access and removing unneeded variables
2018-01-17 14:46:29 +01:00
mslifcak
2c774b8795
sort BIN_PATHS before process ( #510 )
2018-01-17 13:49:07 +01:00
Michael Boelen
b4758e0b23
Use PATH variable as first method to scan directories
2018-01-11 12:05:21 +01:00
Michael Boelen
66f8cb2441
Changed year
2018-01-11 09:50:26 +01:00
Michael Boelen
4042c45954
Changes for new plugin class 'hardware'
2017-12-08 09:37:55 +01:00
Michael Boelen
499f7d5015
Improve process detection
2017-09-16 14:08:26 +02:00
Brian Ginsbach
30c58dd1ed
Don't assume sshd version is in first line ( #452 )
...
There are some versions of OpenSSH where the version information
isn't in the first line (like NetBSD's with the HPN patches).
2017-09-04 15:33:28 +02:00
Michael Boelen
00648a636c
Improve systemd detection
2017-08-17 20:28:32 +02:00
Michael Boelen
4ecb9d4d05
[bulk change] cleaning up, code enhancements, initialization of variables, and new tests
2017-04-30 17:59:35 +02:00
hlein
b595cc0fb5
Various cleanups ( #363 )
...
* Typo fix.
* Style change: always use $(), never ``.
The Lynis code already mostly used $(), but backticks were sprinkled
around. Converted all of them.
* Lots of minor spelling/typo fixes.
FWIW these were found with:
find . -type f -print0 | xargs -0 cat | aspell list | sort -u | egrep '^[a-z]+$' | less
And then reviewing the list to pick out things that looked like
misspelled words as opposed to variables, etc., and then manual
inspection of context to determine the intention.
2017-03-06 07:41:21 +00:00
Michael Boelen
38af9121ea
Properly detect SSH version
2017-02-14 20:10:42 +01:00
Michael Boelen
ea16e798ee
Grammar fix
2017-02-14 20:05:45 +01:00
Michael Boelen
9c71f6061d
Check for pgrep binary
2017-02-10 12:58:59 +01:00
Michael Boelen
34ba1ba184
Changed date and preparing for release
2017-02-09 13:35:40 +01:00
Michael Boelen
57dd96f6c6
Added support for iptables-save
2017-01-28 15:46:56 +01:00
pyllyukko
d25dcd09ef
Set MAC_FRAMEWORK_ACTIVE=1 if grsecurity's RBAC is enabled ( #348 )
...
* Look for gradm utility
* Set MAC_FRAMEWORK_ACTIVE=1 if grsec's RBAC is enabled
2017-01-16 11:02:03 +00:00
Justin P
50b06efd30
macOS Refactoring ( #311 )
...
* Default all macOS `OS` names as macOS. Added comments to specify `uname` outputs for better understanding.
* Refactored all `Mac` instances referring to macOS over to `macOS` formatting.
Tested on my own machine, unable to find any errors outside of normal parameters.
2016-11-05 11:53:22 +01:00
Michael Boelen
1cb1fc40ca
Added more definitions for tools
2016-10-28 11:48:20 +02:00
Michael Boelen
22d27434c9
Enhance pkg support on FreeBSD
2016-10-15 16:38:33 +02:00
Michael Boelen
622d15321b
Added clamconf binary
2016-10-06 11:15:28 +02:00
Michael Boelen
0cc27b956e
New test INSE-8050
2016-10-05 09:50:06 +02:00
Michael Boelen
db419495bf
Added support for arch-audit tooling
2016-09-24 14:49:14 +02:00
Michael Boelen
2534fb99a9
Added file, head, mount, uname, uniq, wc, and xargs
2016-09-10 16:12:15 +02:00
Michael Boelen
2b005afd04
Add cut and sed to binary list
2016-09-08 21:04:35 +02:00
BlueC0re
a596bdc349
added TRBINARY + fix nftables check ( #276 )
...
fixes #273
2016-09-06 20:58:30 +02:00
Michael Boelen
facb68bc32
Added base64 binary
2016-08-29 10:06:41 +02:00
Michael Boelen
a6b04a3ace
Added sort to list of binaries
2016-08-25 15:30:25 +02:00
Michael Boelen
220476d955
Test for blkid binary
2016-07-30 14:09:44 +02:00
Yann ILAS
bc313949c8
Add of MODPROBE variable ( #202 )
...
Test for presence of modprobe utility
2016-05-19 17:23:54 +02:00
Michael Boelen
9f14495d70
Added sha256 and sha256sum utilities
2016-05-05 17:49:04 +02:00
Michael Boelen
eded02cfde
Rewritten counters and dealing with values
2016-05-03 14:57:53 +02:00
mboelen
9e312f5a5f
Replaced functions and minor cleanups
2016-04-28 09:15:54 +02:00
mboelen
098a2e3760
Added istat binary
2016-04-26 21:20:17 +02:00
mboelen
a2514f20e1
Improve logging to state what directory will be scanned
2016-04-19 17:25:25 +02:00
mboelen
a3ae0a450a
No breaks betweens directories
2016-04-19 17:24:08 +02:00
mboelen
2d7ef97605
Consider binaries check as a core test
2016-04-19 17:23:12 +02:00
Eric Light
3b3a852122
Added tooling tests for Fail2Ban ( #162 )
...
* Added binary for Fail2Ban
* Added test for Fail2Ban (presence and configuration)
* Added test to check for enabled Fail2Ban jails
* Added test to confirm at least one enabled jail. Fixed regex.
* Added check to confirm iptables has a fail2ban chain
2016-04-13 08:12:26 +02:00
mboelen
8cc47819b4
Removed copyright line, added description
2016-03-13 16:03:46 +01:00
