Commit graph

1748 commits

Author SHA1 Message Date
Kristian Schuster
3bc70b425e
fix old limits check not working in a few cases 2019-10-13 23:08:19 +02:00
Kristian Schuster
7b52ff52c7
add check for disabled coredumps in etc/profile and systemd 2019-10-13 22:06:50 +02:00
Kristian Schuster
51d3c56842
crypto-test: suppress errors when devs are not accessible for cryptsetup 2019-09-29 17:44:15 +02:00
Kristian Schuster
001cd85183
kernel-test: additional improvements for required reboot detection 2019-09-29 17:42:07 +02:00
Kristian Schuster
364b770c64
kernel-test: determine reboot requirement for more distros. Plus a few fixes 2019-09-28 00:39:12 +02:00
Kristian Schuster
b38031803d
kernel-test: avoid grep errors if etc/security/limits.d does not exist 2019-09-27 00:07:45 +02:00
Kristian Schuster
07084501b6
kernel-test: add linux-lts detection for arch 2019-09-26 23:26:08 +02:00
Kristian Schuster
d17d30d6a7
nginx-test: add log file detection for relative paths 2019-09-26 21:24:15 +02:00
Michael Boelen
e64e49a551
Merge pull request #763 from Marzal/Marzal-F_isRunning
Second version of #740 without shellcheck directives
2019-09-22 15:07:53 +02:00
Michael Boelen
a1b6d463b2
Fixed a typo 2019-09-21 16:31:06 +02:00
Michael Boelen
2c32e8e04d
Merge pull request #765 from Marzal/Marzal-AUTH-9282
Fix auth-9282
2019-09-21 15:49:58 +02:00
Michael Boelen
ca1d7ace1d
Merge branch 'master' of https://github.com/CISOfy/lynis 2019-09-21 10:10:09 +02:00
Mike Robinson
8088d0ab77
Update tests_ldap
Check was backwards
2019-09-19 18:14:06 -06:00
Marzal
0e1e80bacf Double quote to prevent globbing and word splitting.SC2086 2019-09-19 23:36:36 +02:00
Marzal
42ac40aad6 Change variable name from FIND to FIND_P so is not reset by Register 2019-09-19 23:33:19 +02:00
Marzal
ddd87371b5 Double quote to prevent globbing and word splitting.SC2086 Info 2019-09-19 20:01:31 +02:00
Marzal
09a60783a6 Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.SC2166 2019-09-19 20:00:12 +02:00
Michael Boelen
e48df09c4c
Fixed typo found by SDK 2019-09-19 19:10:13 +02:00
Michael Boelen
187016a051
Changed spacing 2019-09-19 15:23:37 +02:00
Michael Boelen
c0f9c0ab84
Style and log improvements 2019-09-19 14:34:06 +02:00
Michael Boelen
f389cc5d99
Merge pull request #761 from Schmuuu/master
enhance nginx include config detection …
2019-09-19 14:21:32 +02:00
Michael Boelen
36627a4eb7
Style improvements 2019-09-19 14:05:15 +02:00
Kristian Schuster
ccb8b2b615
enhance nginx config detection to correctly include confs via relative path and wildcards 2019-09-18 20:47:09 +02:00
Michael Boelen
6cf0b28f2c
Bugfix: line had double print with incorrect quote 2019-09-17 20:13:14 +02:00
Michael Boelen
98017c78ca
Implemented several code style improvements 2019-09-17 14:04:30 +02:00
Michael Boelen
95e9e80834
Moved function 2019-09-14 13:23:28 +02:00
Michael Boelen
13a4dff7fe
Improved logging of HasCorrectFilePermissions function and use correct value when data has a value of zero 2019-09-14 13:22:50 +02:00
Michael Boelen
5c38a0bdb4
Tests using lsof may ignore threads (if supported) 2019-09-13 11:47:39 +02:00
Michael Boelen
ca0239b4d9
[FILE-6374] corrected defaults flag, added root directory, and changed logging 2019-09-12 16:34:45 +02:00
Michael Boelen
79e5b52419
[SSH-7408] added forced-commands-only 2019-09-12 11:17:18 +02:00
Michael Boelen
fa9fdd4322
[MAIL-8804] replaced static strings with translation-aware strings 2019-09-12 11:13:39 +02:00
lowkey
0fc887e830 Removed WARNINGs from unset certificate and private key 2019-09-11 10:47:28 -06:00
Michael Boelen
fbcfab1adc
[LOGG-2154] support new-style rsyslog configuration for remote targets 2019-09-10 14:52:20 +02:00
Michael Boelen
9041517e2a
Added Debian and standardized others 2019-09-03 10:06:26 +02:00
Michael Boelen
0d58ee77a0
[CRYP-7930] replaced incorrect PATH column with alternative 2019-09-02 19:20:16 +02:00
Michael Boelen
a87c2b10f9
Added CRYP-8002 2019-08-29 10:39:43 +02:00
Michael Boelen
4932ab8351
Disabled suggestion for now, as some people will just install a suggested tool to comply instead of determining if it really makes sense. So this suggestion requires more explanation before people turning it on. Also, promisc mode may be impacted, so users see a new issue show up while they just resolved another. 2019-08-28 15:43:10 +02:00
Michael Boelen
61404c1bf3
[TOOL-5160] added support for OSSEC agent daemon 2019-08-28 15:36:59 +02:00
Michael Boelen
7469b4aa72
[CONT-8106] support for newer 'docker info' output that includes additional space 2019-08-26 20:27:00 +02:00
Michael Boelen
f89aa98408
Added FINT-4316 2019-08-26 08:02:11 +02:00
Michael Boelen
22a7f4fd6d
Combine multiple unsets into a single command 2019-08-26 08:01:43 +02:00
Michael Boelen
d703d160ff
Added RHEL, renamed CentOS Linux name, reordered items 2019-08-22 14:20:30 +02:00
Michael Boelen
d2deb63ebb
Added NETW-3200 2019-08-22 14:12:53 +02:00
Michael Boelen
a72650252f
When audit target is missing, stop execution 2019-08-22 14:11:22 +02:00
Michael Boelen
2c4e7711db
Added CentOS and trigger an exception when a system has /etc/os-release but is not defined yet 2019-08-21 14:51:20 +02:00
Michael Boelen
4e39bafd78
New function to display exceptions 2019-08-21 14:50:32 +02:00
Michael Boelen
605e515c31
Updated forensics variable 2019-08-21 14:00:20 +02:00
Michael Boelen
65f1a5e811
Added initial support for DevOps mode to improve continuous integration 2019-08-21 13:59:28 +02:00
Michael Boelen
d395e1a2da
[CRYP-7930] extend test to use cryptsetup/lsblk or crypttab file 2019-08-21 13:50:01 +02:00
Michael Boelen
3db7a3b944
Move -c also to list of deprecated items 2019-08-21 13:48:36 +02:00