prehistoric-systems/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2026-03-11 08:55:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
3193 commits 2 branches 65 tags 12 MiB
Commit graph

2096 commits

Author SHA1 Message Date
Michael Boelen
258b2bf05f
Merge pull request #1064 from Varbin/solaris-ips-svcs 
Add support for Solaris services, run BOOT-5184 there
 2020-12-15 14:16:18 +01:00
Michael Boelen
15ec001a2a
Merge pull request #1074 from Varbin/german-translation 
Extend German translation and add more translated statuses
 2020-12-15 14:13:03 +01:00
Michael Boelen
6e14b73b0c
Merge pull request #1079 from Varbin/1078-path-spaces 
Quote binary variables during SUID/GID enumeration
 2020-12-15 14:11:08 +01:00
Michael Boelen
d1d3882130
Merge pull request #1076 from Varbin/1075-solaris-hostid 
Use first e1000 interface and break after match (for hostid generation on Solaris)
 2020-12-15 14:10:34 +01:00
ElviaSchoultz
d5d43c5d1c
Add EndeavourOS to osdetection. 
Fixes problem #1077
 2020-11-24 08:45:58 +11:00
Simon Biewald
f695488ca8 Quote binary variables during SUID/GID enumeration 
Fixes cisofy/lynis#1078.

Signed-off-by: Simon Biewald <sbiewald@fam-biewald.de>
 2020-11-21 01:34:18 +01:00
Simon Biewald
73f39baca8 Use first e1000 interface and break after match 
Fixes CISOfy/lynis#1075.

Before this commit, the interfaces "e1000g1" and "net0" were allowed.
The name "e1000g0" is appended to the list.
After finding an interface, the loop is interrupted now. As previously
"net0" was always used, even if another interface was available, the list
is reordered to "net0 e1000g1 e1000g0" to not break previous generations.

A typo is also fixed ("No interface found op Solaris ..." -> "No
interface found on").

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-14 22:56:42 +00:00
Simon Biewald
0c686bb6ea Use the new status strings in tests 
See-Also: HEAD^
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-14 20:34:43 +00:00
Michael Boelen
22a9fe7037
Merge pull request #1059 from Varbin/solaris-grub-d 
Test if /etc/grub.d is a directory
 2020-11-13 16:45:59 +01:00
Michael Boelen
eb759f4c13
Merge pull request #1071 from Varbin/opensolaris-detection 
OpenSolaris distribution detection
 2020-11-13 16:01:00 +01:00
Michael Boelen
6026b82e14
Merge pull request #1073 from Varbin/1040-1068-os-detection 
Add NixOS and IPFire
 2020-11-13 15:58:20 +01:00
Simon Biewald
3f83b9ac86 Add NixOS to osdetection 
Fixes cisofy/lynis#1068.

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-12 22:56:31 +01:00
Simon Biewald
183af1d334 Add IPFire to osdetection 
Fixes cisofy/lynis#1040.

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-12 22:12:26 +01:00
Simon Biewald
d388e5d269 Add OpenSolaris and distribution detection 
New variable OPENSOLARIS to distringuish between Oracle Solaris and
OpenSolaris derivates. The edge case of OpenSolaris itself is not yet
solved, but OpenSolaris itself should be very rare these days.

Currently detected and distinguished Solaris variants are:
 - Oracle Solaris >= 11 (exluding Solaris Express and OpenSolaris)
 - Solaris < 11 (as "Sun Solaris")
 - OmniosCE (but not old Omnios)
 - OpenIndiana
 - Shillix
 - SmartOS
 - Tribblix
 - "Unknown Illumos" for unknown distributions based on Illumos

Lynis will fall back to "Sun Solaris" with "SunOS 5.X" for unknown
distributions.
 2020-11-09 23:25:33 +00:00
Simon Biewald
3c31a08024 Do not incorrectly name SFM as IPS 
The "new" service manager was included with Solaris 10 and not 11. It is
named "service management facility" (see smf(5) man page).
There is no IPS service manager, the name is only used for the package
manager of OpenSolaris and Solaris 11.

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-09 23:18:00 +00:00
Michael Boelen
37631b0457
Merge pull request #1061 from Varbin/solaris-hostname 
Simplify tr hostname checking expression
 2020-11-09 14:12:39 +01:00
Michael Boelen
f0b7f9159d
Merge pull request #1069 from Varbin/1065-opensolaris-invalid-characters 
Use `od` only for displaying invalid characters
 2020-11-09 10:36:37 +01:00
Josh Soref
6435aeba8a spelling: unknown 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:56:31 -05:00
Josh Soref
9d0e1938aa spelling: therefore 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:56:31 -05:00
Josh Soref
7157eb45f0 spelling: suggestions 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:53:09 -05:00
Josh Soref
f22e192838 spelling: successful 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:53:09 -05:00
Josh Soref
2b26f13bed spelling: params 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:53:09 -05:00
Josh Soref
f14e12f688 spelling: installed 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:38:46 -05:00
Josh Soref
eadd2a8ed8 spelling: indentation 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:38:46 -05:00
Josh Soref
ab1aa322ac spelling: ignore 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:38:46 -05:00
Josh Soref
a007ad2fe0 spelling: explicitly 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:38:46 -05:00
Josh Soref
b0a5490a2e spelling: contains 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:38:46 -05:00
Josh Soref
08c8d1b8f3 spelling: authentication 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:35:46 -05:00
Josh Soref
acf7943936 spelling: ambiguous 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2020-11-08 23:28:56 -05:00
Simon Biewald
8895eccea2 Use correct character class 
Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-10-31 17:36:06 +00:00
Simon Biewald
3e3589291f Use od only for displaying invalid characters 
The first od is removed, the second time is moved to right before echoing
the characters. On certain OpenSolaris distributions, `od` always outputs
spaces, even if the input is empty. The spaces would have been converted
to !space!, thus Lynis detected invalid characters / old style configuration.

Resolves cisofy/lynis#1065.

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-10-29 00:06:10 +00:00
Simon Biewald
25278b6b38 Add support for Solaris services, run BOOT-5184 there 
The Solaris IPS service manager (svcs) is now detected, and services
managed with it are enumerated.

Test BOOT-5184 now runs on Solaris, too, as SysV init scripts are
supported as well, even with IPS. SysV Init has been the traditional
init system on Solaris.
 2020-10-25 21:51:12 +00:00
Simon Biewald
e917269d01 Reduce tr hostname checking expression 
Solaris' tr does not support full regular expressions.
 2020-10-25 20:25:31 +00:00
Simon Biewald
8ee60cea35 Test if /etc/grub.d is a directory, instead always true 2020-10-25 20:14:08 +00:00
Michael Boelen
499cf1cdb9
Small code enhancements 2020-10-25 18:48:42 +01:00
Michael Boelen
e66709e13b
Merge pull request #1011 from Varbin/986-sysstat-systemd 
[ACCT-9626] Detect sysstat systemd unit
 2020-10-25 18:47:01 +01:00
Michael Boelen
43d0c6a8fd
Merge branch 'master' into add-suricata-ids-ips-test 2020-10-25 12:50:25 +01:00
Michael Boelen
bd6e1d5d39
Include AUTH-9284 and minor changes 2020-10-22 14:17:01 +02:00
Michael Boelen
e67f786caa
Merge pull request #1009 from danielorihuela/feature/get-info-on-locked-accounts 
[AUTH-9284] Feature: gather locked accounts info
 2020-10-22 14:13:34 +02:00
Michael Boelen
1fe12c0023
Merge pull request #1008 from kolenichsj/master 
Alpine Improvements
 2020-10-22 13:28:05 +02:00
Michael Boelen
01c970f73f
Merge pull request #1044 from delscate/master 
Fix wc and head cmd when using busybox
 2020-10-22 13:24:56 +02:00
Thomas Sjögren
4671fb7fb9 add Synology Antivirus Essential malware scanner 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-10-22 12:10:01 +02:00
Michael Boelen
7930644b6c
Merge branch 'master' into fix_nginx_parser 2020-10-22 08:43:44 +02:00
Stéphane
67d04f2536
Add translate function for all sections 
+ add EN and FR up to date languages files
 2020-10-22 00:13:42 +02:00
Michael Boelen
4aeb244789
Merge pull request #1048 from konstruktoid/pgrep 
require pgrep before usage
 2020-10-21 15:08:21 +02:00
Michael Boelen
8e07c3e9dc
Merge pull request #1013 from Jimver/timesyncd_fix 
[TIME-3185]: Change timesyncd synchronization file
 2020-10-21 15:02:03 +02:00
Michael Boelen
71c474f455
[KRNL-5830] ignore rescue kernel on systems such as CentOS 2020-10-21 14:40:30 +02:00
Thomas Sjögren
3124a04ce9 require pgrep before usage 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-10-21 11:27:44 +02:00
Michael Boelen
92df49d08e
Merge pull request #973 from igloonet/fix/functions-parse-nginx-abs-path 
Support absolute paths in nginx includes and fix ls warning on empty directories
 2020-10-20 13:38:08 +02:00
Michael Boelen
4a99f3bdad
Merge pull request #1017 from Varbin/1014-flatcar-detection 
Add support for Flatcar Container Linux
 2020-10-20 13:14:18 +02:00