1588 commits

Author	SHA1	Message	Date
Michael Boelen	0f80fa07aa	New function SafeFile	2019-07-12 13:05:43 +02:00
Michael Boelen	ce263f8cd6	Textual changes	2019-07-10 20:22:31 +02:00
Michael Boelen	f40b4287eb	Show 'Not found' instead of 'OK'	2019-07-10 20:12:17 +02:00
Michael Boelen	afba58e743	[PROC-3802] test for presence of prelink tooling	2019-07-10 20:10:31 +02:00
Michael Boelen	1a57b41bdd	[PROC-3602] Use ROOTDIR	2019-07-10 20:00:52 +02:00
Michael Boelen	f5adb68e00	First round of cleanups and textual improvements	2019-07-10 19:36:51 +02:00
Michael Boelen	83d510934d	Quote file name as it may include spaces	2019-07-10 19:36:19 +02:00
Michael Boelen	c97dc3044a	Use exit code instead of ITEM_FOUND value	2019-07-10 19:35:51 +02:00
Michael Boelen	09d8832a0b	[CRYP-7903] enhanced test to properly work	2019-07-09 11:42:04 +02:00
Michael Boelen	ae474c72c6	[SSH-7402] detect other SSH daemons like dropbear and split SSH daemon from OpenSSH daemon	2019-07-09 11:16:59 +02:00
Michael Boelen	6891f64c39	Added CRYP-7930	2019-07-09 10:33:51 +02:00
Michael Boelen	f3f6be6630	Fix for incorrect subdirectory retrieval and adding enhancement to reduce number of evaluations needed	2019-07-08 21:20:45 +02:00
Michael Boelen	054ca21ee3	Fix: split directories	2019-07-08 21:19:28 +02:00
Michael Boelen	2c17c14c3b	New profile option to ignore specified certificate directories	2019-07-08 15:08:56 +02:00
Michael Boelen	1854e51e7e	New function: Equals	2019-07-08 15:05:28 +02:00
Michael Boelen	16146aabc0	Added option: ssl-certificate-paths-to-ignore	2019-07-08 14:27:40 +02:00
Michael Boelen	5217db95b1	Add deprecation message for old format and added check for unexpected/invalid characters in profile (additional security measure)	2019-07-07 18:49:01 +02:00
Michael Boelen	7a816ece8a	Added DisplayWarning function	2019-07-07 18:47:55 +02:00
Michael Boelen	05012f60fd	Added new colors and regrouping	2019-07-07 18:46:55 +02:00
Michael Boelen	007faf47c3	Cleanup of default profile and migration of permdir/permfile	2019-07-07 18:46:23 +02:00
Michael Boelen	c639cb4f6e	Only check empty binaries when we did a full scan, as for some commands the binary scanning is not performed	2019-07-05 18:37:10 +02:00
Michael Boelen	8d4fd1a7aa	Add Readonly() function	2019-07-05 18:35:45 +02:00
Michael Boelen	0443d643da	Show tip to use 'lynis generate hostids' when they are missing	2019-07-05 18:35:10 +02:00
Michael Boelen	ade3117307	New option to disable plugins via profile	2019-07-03 15:39:26 +02:00
Michael Boelen	2e1ec2c32f	Change variable name to better indicate what it does	2019-07-03 15:07:46 +02:00
Michael Boelen	bc88775d0e	When PATH is defined, only locations from variable	2019-07-01 07:39:32 +02:00
Michael Boelen	76c3ea0edb	Fall back to echo if ECHOCMD is empty early during execution of program	2019-06-30 20:38:05 +02:00
Michael Boelen	cb77d5a3f7	Show text when stopping execution	2019-06-30 20:37:33 +02:00
Michael Boelen	cfaea21430	Security: test all parameters and arguments for the presence of control characters	2019-06-30 19:29:48 +02:00
Michael Boelen	fdacc00b45	Security: test PATH and warn or exit on discovery of dangerous location	2019-06-30 19:21:07 +02:00
Michael Boelen	5e4e44bdf3	Added check to ensure that common system tools are defined as extra safety measure	2019-06-30 18:27:31 +02:00
Michael Boelen	08e8e59197	New function: SafeInput	2019-06-29 19:34:12 +02:00
Michael Boelen	dde57ce870	Merge branch 'master' of https://github.com/CISOfy/lynis	2019-06-24 15:47:39 +02:00
Michael Boelen	ec519dc976	Minor cleanups	2019-06-24 15:40:38 +02:00
Michael Boelen	d0377c563d	Added TLSv1 as weak protocol (nginx)	2019-06-24 15:40:18 +02:00
Michael Boelen	94e0a4e40d	Added Suricata (IDS)	2019-06-24 15:38:34 +02:00
Michael Boelen	8d16a62bbd	Added Bro (IDS)	2019-06-24 15:37:40 +02:00
Michael Boelen	b0f966ae48	Check number of arguments for 'audit dockerfile'	2019-06-24 15:33:42 +02:00
Michael Boelen	6f3c268c57	Non-functional code removed as it does not work as intended and lacks required validation controls - Thanks to Sander Bos for reporting	2019-06-24 15:23:30 +02:00
Michael Boelen	a312968dd6	Merge pull request #714 from deltablot/issue628 ... Add PHP ini file locations for Ubuntu 18.04. Fix #628	2019-06-24 13:46:30 +02:00
Michael Boelen	f6f7a69857	Merge pull request #713 from bcs016/patch-1 ... Update tests_authentication - AUTH-9402	2019-06-24 13:43:19 +02:00
Michael Boelen	6cd903e079	Merge pull request #722 from pyllyukko/linux-bsdrc.d ... Detect BSD-style (rc.d) init in Linux systems	2019-06-24 13:42:17 +02:00
Michael Boelen	ef89ee3fc9	[NETW-3012] make ss command output preferred for Linux system and changed output format	2019-06-24 13:39:30 +02:00
Michael Boelen	6d55767c18	Include 'generate' command	2019-06-17 12:16:29 +02:00
pyllyukko	9b02934339	Detect BSD-style (rc.d) init in Linux systems	2019-06-06 15:41:29 +03:00
Michael Boelen	61d8c91eeb	[FILE-6310] filter on correct field for AIX	2019-06-06 14:20:12 +02:00
Michael Boelen	59b102989f	[AUTH-9268] AIX find does not support maxdepth	2019-06-06 14:13:05 +02:00
Michael Boelen	8e61275ff4	Move state recording to report section	2019-05-16 15:23:23 +02:00
Nicolas CARPi	6ca24aae8b	Add PHP ini file locations for Ubuntu 18.04. Fix #628	2019-05-08 01:01:43 +02:00
bcs016	10b8da1c6a	Update tests_authentication ... Update AUTH-9402, change name to check in etc/passwd file when device is a QNAP	2019-04-29 11:47:11 +02:00