tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
419 Commits 2 Branches 63 Tags 18 MiB
Shell 99.6%
Roff 0.4%
Go to file
Roland Smith db828b5e03 Used service(8) to discover running services. 
On all supported FreeBSD releases, the service(8) program can be used to
discover which services are running. This program has been added to the test
for binaries. If available, it will be used to test for services. If not, the
original code that parses /etc/rc.conf is used.

On my system, the following information is produced in the logfile:

    [19:51:22] Performing test ID BOOT-5165 (Check for FreeBSD boot services)
    [19:51:22] Searching for services at startup (service)
    [19:51:23] Found service (service/rc.conf): bgfsck
    [19:51:23] Found service (service/rc.conf): cleanvar
    [19:51:23] Found service (service/rc.conf): cron
    [19:51:23] Found service (service/rc.conf): cupsd
    [19:51:23] Found service (service/rc.conf): dbus
    [19:51:23] Found service (service/rc.conf): devd
    [19:51:23] Found service (service/rc.conf): dmesg
    [19:51:23] Found service (service/rc.conf): dnsmasq
    [19:51:23] Found service (service/rc.conf): gptboot
    [19:51:23] Found service (service/rc.conf): hostid
    [19:51:23] Found service (service/rc.conf): hostid_save
    [19:51:23] Found service (service/rc.conf): ip6addrctl
    [19:51:23] Found service (service/rc.conf): ipfw
    [19:51:23] Found service (service/rc.conf): mixer
    [19:51:23] Found service (service/rc.conf): motd
    [19:51:23] Found service (service/rc.conf): newsyslog
    [19:51:23] Found service (service/rc.conf): nginx
    [19:51:23] Found service (service/rc.conf): openntpd
    [19:51:23] Found service (service/rc.conf): postfix
    [19:51:23] Found service (service/rc.conf): powerd
    [19:51:23] Found service (service/rc.conf): sendmail
    [19:51:23] Found service (service/rc.conf): smartd
    [19:51:23] Found service (service/rc.conf): syslogd
    [19:51:23] Found service (service/rc.conf): virecover
    [19:51:23] Found 24 services/options to run at startup

The report shows:

    [+] Boot and services
    ------------------------------------
    - Service Manager [ UNKNOWN ]
    - Checking presence FreeBSD loader [ FOUND ]
    - Checking services at startup (service/rc.conf) [ DONE ]
    Result: found 24 services/options set
 		2015-04-27 19:58:07 +02:00
db Initial import 2014-08-26 17:33:55 +02:00
debian Changes for build process 2014-10-24 14:21:27 +02:00
extras Improvements for building 2014-10-26 23:34:34 +01:00
include Used service(8) to discover running services. 2015-04-27 19:58:07 +02:00
plugins Added note about community plugins and support address 2015-02-25 20:38:20 +01:00
.gitignore Updated spec file and build script 2014-09-14 20:35:01 +02:00
CHANGELOG Release 2.1.0 2015-04-16 20:13:59 +02:00
CONTRIBUTORS Update of the files to reflect HTTPS version of website and 2015. Happy New Year! 2015-01-03 12:45:22 +01:00
FAQ Update of the files to reflect HTTPS version of website and 2015. Happy New Year! 2015-01-03 12:45:22 +01:00
INSTALL Update of the files to reflect HTTPS version of website and 2015. Happy New Year! 2015-01-03 12:45:22 +01:00
LICENSE Update of LICENSE file, which has version control texts in it 2014-10-06 14:00:47 +02:00
README Updates to text for reporting feedback 2015-01-30 13:14:54 +01:00
README.md Updated text 2015-03-18 16:06:43 +01:00
default.prf Add new plugin support and example change 2015-04-16 20:01:23 +02:00
lynis Initialise variable 2015-04-21 14:12:05 +02:00
lynis.8 Removing some parameters to simplify program 2015-02-03 16:28:37 +01:00

README.md

lynis

Lynis - Security auditing and hardening tool, for Unix based systems

Lynis is an security auditing and hardening tool for Unix derivatives like Linux, BSD and Solaris. It performs an in-depth security scan on the system to detect software and security issues. Besides information related to security, it will also scan for general system information, installed packages, and possible configuration issues.

We believe software should be simple, updated on a regular basis and open. You should be able to trust, understand, and even alter the software. Many agree with us, as the software is being used by thousands every day to protect their systems.

The software is aimed at assisting with automated auditing, configuration management, software patch management, penetration testing, vulnerability management, and malware scanning of Unix-based systems.

License:

  • GPLv3

Main audience:

  • System administrators
  • Auditors
  • Security officers
  • Security professionals

First run

Clone or download the project files. No compilation or installation is required.

Execute: ./lynis audit system

By default If you want to run the software as root, we suggest to alter the ownership of the files.

Documentation

See for full documentation https://cisofy.com/documentation/lynis/

Flexibility

For people who want to expand tests, it is suggested to use the tests_custom file (template in include directory). Plugins are another possibility to customize, although their main goal is collecting data.

Enterprise options

This software component has additional options and support available for companies. If you want to perform more tests and centrally manage them, consider the purchase of a license.

Support

Got an improvement to share? Create an issue in the tracker on GitHub or send us an e-mail: lynis-dev@cisofy.com