Michael Boelen
e5462afb15
Added support for blog posts and articles to support suggestions
2024-10-11 11:14:31 +00:00
nser77
0891d2693e
Update tests_firewalls
2024-10-11 11:04:56 +02:00
Michael Boelen
66b1735826
Merge branch 'master' of https://github.com/CISOfy/lynis
2024-10-10 13:03:29 +00:00
Michael Boelen
8918445e2c
[BOOT-5264] Change output and link to clarify options
2024-10-10 13:03:11 +00:00
nser77
b5d86daabb
Update tests_firewalls
2024-10-10 13:06:57 +02:00
nser77
fa9082ab77
Update tests_firewalls
2024-10-10 12:31:05 +02:00
CloudyProton
99409e04a2
Include powerpc64le on tests_authentication
...
Add check for powerpc64le-linux-gnu location in PAM_FILE_LOCATIONS
2024-10-10 00:29:32 +00:00
nser77
5d50814f04
Update tests_firewalls
2024-10-09 12:24:18 +02:00
nser77
d64f480823
Update tests_firewalls
2024-10-09 09:40:01 +02:00
nser77
2d4ec42696
Update tests_firewalls
2024-10-09 00:57:16 +02:00
nser77
d90413e243
Update tests_firewalls
2024-10-08 12:02:07 +02:00
nser77
13ced756cd
Update tests_firewalls
2024-10-08 11:59:24 +02:00
nser77
8ca5b83584
Update tests_firewalls
2024-10-08 11:29:48 +02:00
Michael Boelen
f4ceac048b
Merge pull request #1536 from jpasher-lazor/HTTP-6660_fix_check
...
HTTP-6660 - Wrap quotes properly for dash and other(?) shells
2024-10-08 11:00:14 +02:00
Michael Boelen
94a944b110
Moving entry Garden Linux
2024-10-08 08:59:31 +00:00
vassap2022
d0f5ee7df9
add gardenlinux in osdetection
...
Fixes : #1507
2024-10-08 10:44:17 +02:00
nser77
e9c2a1ad3f
Update tests_firewalls
2024-10-08 01:36:39 +02:00
teoberi
1a408248b0
Update tests_firewalls -> FIRE-4508
...
Fix copy error
2024-10-04 21:55:57 +03:00
teoberi
c51b066131
Update tests_firewalls -> FIRE-4508
...
Include #1554
Fix FIND variable (remove "\n" and -z)
Add sort + uniq while read line from FIND
2024-10-04 21:46:30 +03:00
Michael Boelen
f08fadb7f9
Merge pull request #1548 from teoberi/teoberi-KRNL-5622
...
Update tests_kernel -> KRNL-5622
2024-10-04 10:12:57 +02:00
nser77
b7ced8e030
FIRE-4508 - Fix typo in conditional expression
2024-10-04 09:21:11 +02:00
Michael Boelen
f8f2b6441a
Merge pull request #1550 from Aera23/master
...
Update osdetection - Peppermint OS
2024-10-04 08:26:50 +02:00
Francois Perrad
58bff4f54e
add Buildroot
...
fix #1520
2024-10-02 11:28:06 +02:00
Aera23
50a1b15ec3
Update osdetection - Peppermint OS
2024-10-02 12:15:40 +09:30
teoberi
42f0b05d10
Update tests_kernel -> KRNL-5622
...
Fix runlevel detection for SO without systemd (eg. Slackware)
2024-10-01 10:09:43 +03:00
Kirill Nikiforov
214471d8b7
add Fedora Linux Asahi Remix
2024-09-30 20:50:21 +04:00
Michael Boelen
03168113ca
[KRNL-5622] test if systemctl binary is set
2024-09-30 11:53:13 +00:00
Michael Boelen
699ec384d2
[FILE-6398] Only perform test if we know if Linux kernel is monolithic/modular
2024-09-30 10:00:55 +00:00
Michael Boelen
7bf2024c7d
Merge branch 'master' of https://github.com/CISOfy/lynis
2024-09-10 16:46:20 +00:00
Michael Boelen
f0f9d79b7b
Merge pull request #1526 from ferorge/master
...
Fix issues #1496 and #1497
2024-09-10 13:03:57 +02:00
Justin Pasher
dc9d3606a4
Needs to be single = for POSIX sh
2024-08-30 12:38:13 -05:00
Justin Pasher
79786e5cc9
Wrap quotes properly for dash and other(?) shells
2024-08-30 11:17:46 -05:00
Michael Boelen
815e7d7c66
AUTH-9328: log entry was incorrect
2024-08-07 11:40:08 +00:00
ferorge
623eaa76fe
Fix issue #1497
...
Added kernel name for Hardkernel odroid XU4.
2024-07-23 19:22:07 -03:00
ferorge
bc88602e41
Fix issue #1496
...
Added package and service name used in ubuntu 24.04.
2024-07-23 19:19:55 -03:00
Stefan Baumgartner
9eafa7913c
Update tests_filesystems
...
More elegant regex to accommodate for tabs and spaces.
2024-05-24 08:18:16 +02:00
Stefan Baumgartner
a6da9336af
Update tests_networking
...
More elegant regex to accommodate for tabs and spaces.
2024-05-24 08:15:50 +02:00
Stefan Baumgartner
04794c3bcb
Merge branch 'CISOfy:master' into master
2024-05-24 08:12:22 +02:00
Roeland Jansen
2d03e1821d
tumbleweed: added /usr/etc/ssh to SSH_DAEMON_CONFIG_LOCS var
2024-05-20 12:36:00 +02:00
Stefan Baumgartner
0515094a33
Fix REGEX in FILE-6430
2024-05-19 12:34:57 +02:00
Stefan Baumgartner
ab17f170a5
Fix regex for NETW-3200
2024-05-19 12:23:56 +02:00
Michael Boelen
c745a6c0a6
Merge branch 'archarm'
2024-05-17 12:36:31 +00:00
Michael Boelen
f8e2da3087
PKGS-7392: filter only lines starting with a number when checking apt-check
2024-05-16 11:13:25 +00:00
Michael Boelen
672d1fce23
Merge pull request #1364 from pyllyukko/ulimit-fix
...
KRNL-5820: Accept ulimit with -H parameter also
2024-05-16 08:49:17 +02:00
Michael Boelen
e75a7b9547
Merge branch 'master' into master
2024-05-16 08:48:23 +02:00
Michael Boelen
1278cd3f2b
Merge pull request #1499 from pyllyukko/krb-fix
...
KRB-1010: Silence output when SKIPTEST != 0
2024-05-16 08:38:34 +02:00
Michael Boelen
c1d6328d46
Merge pull request #1498 from pyllyukko/typo-fix
...
Fixed a typo
2024-05-16 08:38:00 +02:00
pyllyukko
c3996cd1bb
Rephrasing
2024-05-16 07:16:20 +03:00
pyllyukko
d60c197e14
KRB-1010: Silence output when SKIPTEST != 0
...
Fixes https://github.com/CISOfy/lynis/pull/1456#issuecomment-2113390171
2024-05-15 23:31:17 +03:00
Michael Boelen
7ad42d689f
Fix for line that gave error
2024-05-15 20:29:28 +00:00
pyllyukko
5182ce31fb
Changed the Kerberos plugin into a category
...
According to @mboelen's recommendations:
https://github.com/CISOfy/lynis/pull/1456#issuecomment-2110761098
2024-05-15 21:52:30 +03:00
pyllyukko
4d5b41cb4e
plugin_krb5_phase1: Added few more tests
...
* Check that admin principals have disallow_tgt_based attribute
* Check that regular user principals have requires_pre_auth and
disallow_svr attributes
* Check for weak crypto
* Use kdb5_util for this
2024-05-15 21:52:30 +03:00
pyllyukko
ac526be452
Added initial version of a Kerberos plugin
2024-05-15 21:52:30 +03:00
Michael Boelen
24679bee9a
Do not unset SKIPREASON, as it is cleared at the beginning of the function
2024-05-15 12:23:23 +00:00
Michael Boelen
1a26005b50
Update consts
...
Setting variables
2024-05-15 14:12:54 +02:00
Michael Boelen
2231470615
Merge pull request #1406 from xnoguer/issue-1275
...
Checking debsums default file to make sure cron jobs are enabled. Issue 1275
2024-05-15 13:40:45 +02:00
Michael Boelen
b4e57bcbd8
Merge pull request #1489 from katalyst666/master
...
changed wording of the output AllowUsers to AllowGroups in test SSH-7440
2024-05-14 23:53:28 +02:00
Michael Boelen
c8c7eeb2ec
Merge pull request #1458 from grandcentrix/mac-check-filevault-status
...
Added CRYP-7932 to determine if the system has enabled macOS FileVault.
2024-05-14 19:27:06 +02:00
Florian Sonnenschein
79632bfbe5
- Deleted "filevault_status" variable
...
- Now checks if "fdesetup" exists
- Add some hardening points (AddHP): 3 of 3 when enabled, 0 of 3, when not.
2024-05-14 16:02:51 +02:00
Michael Boelen
c13da07039
Merge pull request #1460 from grandcentrix/macos-get-applications-and-services
...
Added PKGS-7305 - macOS Applications and CoreService (Name & Version)
2024-05-14 14:51:00 +02:00
Michael Boelen
65ac3e65b4
Merge pull request #1388 from xnoguer/issue-1367
...
Fixing test on kernel major and minor version (FILE-6344). Issue 1367
2024-05-14 14:39:00 +02:00
Michael Boelen
1773db0bef
Merge pull request #1296 from konstruktoid/issue1286
...
use systemctl get-default instead of following link
2024-05-14 14:30:11 +02:00
Michael Boelen
68c99760a1
Merge pull request #1392 from ianchesal/ianchesal.recognize-cos
...
Add .editorconfig and detection for Google's Container-Optimized OS
2024-05-14 14:27:20 +02:00
Michael Boelen
ba4cd63bda
Added KDE Neon
2024-05-14 12:23:36 +00:00
Michael Boelen
e41e08ad1b
Merge pull request #1284 from mab974/koozali
...
osdetection: add Koozali #1274
2024-05-14 14:13:17 +02:00
Michael Boelen
481880e0f6
Merge pull request #1317 from zbalkan/wazuh-malware-scan
...
Added Wazuh as a malware scanner/antivirus and rootkit detection tool
2024-05-14 13:30:58 +02:00
Michael Boelen
2db0bb7334
Merge pull request #1302 from konstruktoid/issue1285
...
add check for ESET oaeventd
2024-05-14 13:18:07 +02:00
Michael Boelen
a0f9a61b73
Merge pull request #1279 from Hyask/skia/pmos
...
osdetection: add PostmarketOS
2024-05-14 11:58:42 +02:00
Michael Boelen
fd62c192fe
Merge pull request #1156 from sanderu/FILE-6398
...
Added FILE-6398 test
2024-05-14 11:57:43 +02:00
Michael Boelen
a29a5786be
Merge pull request #1343 from alangonzalez/master
...
Replace newer tr command syntax with older ascii specific operations
2024-05-14 11:54:27 +02:00
Michael Boelen
9fd1a811d1
Merge pull request #1474 from tsvenbla/master
...
Added regex for NETW-3200 in tests_networking
2024-05-14 11:44:41 +02:00
Michael Boelen
2cb1f4351f
Merge pull request #1373 from jsegitz/tests_mac_frameworks2
...
tests_mac_frameworks: check for existance of semanage binary
2024-05-14 11:41:04 +02:00
Michael Boelen
eeec52b160
Update tests_mac_frameworks
...
Changed check from is executable to is not empty
2024-05-14 11:40:50 +02:00
Michael Boelen
83695ad3e2
Merge pull request #1395 from xnoguer/issue-1280
...
Adding missing test number for suggestion. Issue 1280
2024-05-14 11:35:29 +02:00
Michael Boelen
182ba62369
Merge pull request #1389 from xnoguer/issue-1354
...
Change in suggestion message. Issue 1354
2024-05-14 11:34:12 +02:00
Michael Boelen
b8064bc5de
Don't reset status of malware scanner, as there might be two available. Small change to format
2024-05-14 06:50:26 +00:00
Michael Boelen
f22bfb5c6a
Merge pull request #1481 from vk6xebec/vk6xebec-macafee-1
...
McAfee antivirus has been deprecated
2024-05-14 08:35:15 +02:00
Michael Boelen
529102c5e7
Merge pull request #1459 from grandcentrix/macos-brew-get-versions
...
PKGS-7303: Added version numbers to brew packages.
2024-05-14 08:33:51 +02:00
Michael Boelen
ba18b533d9
Merge pull request #1473 from NL-TCH/patch-1
...
Add nobara osdetection
2024-05-14 08:32:51 +02:00
Michael Boelen
6cbea90a7d
Merge pull request #1384 from xnoguer/issue-1322
...
Adding test MALW-3291 in order to solve issue 1322
2024-05-14 08:31:29 +02:00
Michael Boelen
52139773f3
Merge pull request #1318 from zbalkan/wazuh-logging
...
Added wazuh-agent as a remote syslog capability
2024-05-14 08:29:19 +02:00
Michael Boelen
d9ac616d11
Merge pull request #1450 from hmrodrigues/fix/apk-PackageIsInstalled
...
Fixed Alpine Linux installed package detection
2024-05-14 08:23:54 +02:00
Michael Boelen
f1da7bf069
Merge pull request #1365 from pyllyukko/legal-keywords-report
...
Added "prosecute" & "report" to LEGAL_BANNER_STRINGS
2024-05-14 08:22:41 +02:00
Michael Boelen
04e46071c7
Merge pull request #1387 from xnoguer/pr_docker_error
...
Checking for errors, not only warning in docker info output
2024-05-14 08:21:53 +02:00
Michael Boelen
308106993d
Merge pull request #1345 from pyllyukko/pkgtools
...
Added Slackware support for PackageIsInstalled() function
2024-05-14 08:20:30 +02:00
Michael Boelen
9e589806dc
Merge pull request #1154 from sanderu/HTTP-6660
...
Adding HTTP-6660 test
2024-05-14 08:18:53 +02:00
Michael Boelen
400d5dd0e2
Merge pull request #1470 from eltociear/patch-1
...
Update osdetection
2024-05-14 08:17:05 +02:00
Michael Boelen
bf54ba6194
Merge pull request #1438 from xnoguer/pr_grep_3.8
...
PR grep 3.8
2024-05-14 08:15:25 +02:00
Michael Boelen
e8facbdf35
Merge pull request #1475 from Constacalm/patch-altlinux-name-checking
...
Update osdetection (ALT Linux)
2024-05-14 08:13:13 +02:00
Andre @ ARK-ICT
740baf29af
postgresDB fixes for almalinux, rockylinux and freebsd. Tested on almalinux8/9, rockylinux9 and freebsd13
2024-05-09 20:45:45 +02:00
gonzalo
aec1f59432
Update binaries
...
Fix a showing error for grep --help on OpenBSD.
Discovered by me, fixed by @mboelen
2024-05-04 07:52:47 +02:00
katleese
8d7c30fd9a
changed AllowUsers to AllowGroups in test SSH-7440
2024-04-29 10:21:59 +02:00
vk6xebec
22ce0b40c3
Update tests_php to include PHP8.3 and 8.4
...
PHP 8.3 is the latest version. 8.4 is the upcoming version
2024-04-07 11:16:46 +08:00
vk6xebec
75818a636c
McAfee antivirus has been deprecated
...
As of 1 Oct 2023, McAfee antivirus for Linux has been deprecated https://www.mcafee.com/support/?locale=no-NO&articleId=TS103384&page=shell&shell=article-view
2024-04-07 11:02:14 +08:00
Constacalm
48cb2c7cb8
Update osdetection (ALT Linux)
...
Consider to update osdetection script to detect ALT Linux distro in issue #1465 (https://github.com/CISOfy/lynis/issues/1465 )
2024-04-01 14:48:23 +03:00
Tobias Svenblad
afd0eaddf0
Added regex for NETW-3200 in tests_networking
...
Changed the check /bin/true to /bin/(true|false) to be more inclusive and get rid of false positives.
2024-03-28 22:01:14 +02:00
TCH
58d084ef71
Update osdetection
2024-03-26 20:50:50 +01:00
Ikko Eltociear Ashimine
f36e39063a
Update osdetection
...
minor fix
2024-03-22 14:42:14 +09:00
Michael Boelen
7627d86b88
Merge pull request #1441 from D3vil0p3r/patch-1
...
added Athena OS detection
2024-03-19 11:52:00 +01:00
Erasure5959
6f81b6502b
Update osdetection - add support for OSMC
...
Add detection support for OSMC.
2024-03-18 15:21:27 +02:00
