prehistoric-systems/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2026-03-11 08:55:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
3444 commits 2 branches 65 tags 12 MiB
Commit graph

2245 commits

Author SHA1 Message Date
Michael Boelen
755abdc556
Merge pull request #1137 from teoberi/Lynis-with-PostgreSQL-13.1---test-ID-DBS-1826/DBS-1828 
Lynis with PostgreSQL 13.1 test ID DBS-1826/DBS-1828
 2021-07-21 17:22:17 +02:00
Michael Boelen
b0bee65843
KRNL-5830: sort kernels by version (ls -v) instead of date on disk (ls -t) 2021-07-21 15:26:48 +02:00
Michael Boelen
ad5909372d
PKGS-7410: don't show exception for systems running LXC 2021-07-21 13:16:08 +02:00
Michael Boelen
8f6a373f6b
Merge pull request #1153 from Idesmi/patch-1 
Added openSUSE MicroOS
 2021-07-20 23:29:10 +02:00
Michael Boelen
93a681006f
Merge pull request #1169 from al-lac/macos-detection 
Fix Big Sur Detection and add macOS Monterey
 2021-07-20 21:07:11 +02:00
Michael Boelen
71c15afbd1
Added missing quote 2021-07-20 16:32:18 +02:00
Michael Boelen
20be0f61e3
Merge pull request #1188 from digitalcheetah/artix-linux 
Adding Artix Linux to osdetection
 2021-07-20 11:34:17 +02:00
Michael Boelen
6d6e160100
Merge branch 'master' of https://github.com/CISOfy/lynis 2021-07-20 11:32:05 +02:00
Michael Boelen
3a03af42aa
Fix: show 'egrep' instead of 'grep' when egrep is missing 2021-07-20 11:31:18 +02:00
Michael Boelen
6755ac45c2
Replaced tab with space 2021-07-20 11:30:23 +02:00
Michael Boelen
e0a5555715
Merge pull request #1186 from just-some-tall-bloke/patch-1 
Added detection for NethServer
 2021-07-15 13:16:09 +02:00
Michael Boelen
aa91bb4c85
Corrected syntax 2021-07-12 15:21:35 +02:00
Jay Keller
cd632059e0
Adding OpenRC to boot services detection 2021-07-11 04:39:36 +00:00
digitalcheetah
2816ed5598
Adding Artix Linux to osdetection 2021-07-11 04:25:38 +00:00
just-some-tall-bloke
e2aa40665c
Update osdetection 
Added NethServer

https://www.nethserver.org/
 2021-07-09 11:06:12 +02:00
Michael Boelen
7867759750
Dropping option to filter by label as newer versions of 'ip' give another result (no output) 2021-07-08 15:18:20 +02:00
Michael Boelen
5d96098a82
Switched order for interface detection on Linux 2021-07-08 14:54:49 +02:00
Michael Boelen
97e435ffe8
Add fallbacks for hostid generation and improve logging 2021-07-08 13:39:13 +02:00
Michael Boelen
da024079f1
Improve HostID generation and logging 2021-07-02 14:23:53 +02:00
Rob Chekaluk
b556450364 FILE-6344: support hidepid textual values 2021-06-21 08:53:43 -04:00
Alexander Lackner
fff5df170e Fix Big Sur Detection and add macOS Monterey 2021-06-15 20:49:00 +02:00
Michael Boelen
54684aaac5
Merge pull request #1158 from jhe2/wc-argument-fix 
[HRDN-7231] When calling wc, use the short -l flag instead of --lines…
 2021-06-03 13:46:58 +02:00
Michael Boelen
922f822133
Merge pull request #1157 from mhdry/test-arch32-audit 
Test PKGS-7320 extended to "Arch Linux 32"
 2021-06-03 13:46:06 +02:00
Johannes Heimansberg
5666ed0a6d [HRDN-7231] When calling wc, use the short -l flag instead of --lines to make it work with busybox's wc implementation also 2021-05-21 19:51:53 +02:00
Michael Boelen
d23c722c04
Removed trailing spaces 2021-05-20 08:30:54 +02:00
Michael Boelen
54f9281040
Added BunsenLabs detection 2021-05-20 08:28:54 +02:00
Marc Hendry
13bf829461 Test PKGS-7320 extended to "Arch Linux 32" 
PKGS-7320 checks whether package arch-audit is installed. This test has been
extended to test ${OS_FULLNAME} for both "Arch Linux" as well as "Arch Linux 32".
 2021-05-19 14:43:55 +02:00
Marc Hendry
b339145b84 Added Arch Linux 32 2021-05-14 16:04:07 +02:00
Idesmi
7044d7647e
Added openSUSE MicroOS 2021-05-14 11:00:39 +02:00
Michael Boelen
efc71ae6bb
Merge pull request #1119 from NicolaiSoeborg/add-MOR-bit-check 
Check MemoryOverwriteRequest Control
 2021-05-11 19:56:55 +02:00
Michael Boelen
4cfd59d60c
Merge pull request #1135 from pyllyukko/typo-fix 
Small typo fix in ACCT-9622 LogText
 2021-05-11 19:54:15 +02:00
Michael Boelen
d694afadd6
Update osdetection 2021-05-11 16:56:39 +02:00
Fred
e1d49ff007 Added detection of Rocky Linux to include/osdetection 2021-05-11 10:15:23 -04:00
Michael Boelen
32143f6377
Merge pull request #1139 from teoberi/New-test-BOOT-5140---Check-for-ELILO-boot-loader-presence 
New test: BOOT-5140 - Check for ELILO boot loader presence
 2021-05-11 11:21:33 +02:00
Michael Boelen
2ee335503d
Merge pull request #1143 from jhe2/logg-2138-metalog 
[LOGG-2138] Do not check for klogd when metalog is being used
 2021-05-11 11:14:27 +02:00
Michael Boelen
b941d7fccb
Added Manjaro (ARM) 2021-05-11 11:12:23 +02:00
Michael Boelen
ac313553fb
Added AlmaLinux 2021-05-11 11:03:43 +02:00
Johannes Heimansberg
0a5dfbe5e2 [LOGG-2138] Do not check for klogd when metalog is being used 
Metalog comes with its own kernel logger, so there is no need to also run klogd.
 2021-05-04 10:50:56 +02:00
Thomas Sjögren
ed3d75872e add support for additional Aide db paths 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2021-04-30 22:07:42 +02:00
Michael Boelen
db033ed320
Merge pull request #1138 from jhe2/b1134 
[BOOT-5104] Add service manager detection support for runit
 2021-04-29 09:56:22 +02:00
Michael Boelen
0506d4467a
Merge pull request #1105 from afunix/1103-blacklisted-modules 
1103: FILE-6430 reports suggestion only when at least one kernel module is not in the blacklist
 2021-04-28 09:41:59 +02:00
Johannes Heimansberg
1d45d5534e [BOOT-5104] Add service manager detection support for runit 
This fixes issue #1134.
 2021-04-25 10:54:00 +02:00
Michael Boelen
f41a2ead38
Merge pull request #1130 from ocafebabe/cmd_support 
Initial draft for Cmd support
 2021-04-15 08:35:31 +02:00
Michael Boelen
95d2ae0dee
Update tests_accounting 
Added condition
 2021-04-15 08:34:56 +02:00
Michael Boelen
032ba73987
Merge pull request #1136 from murin-matus/patch-1 
Add missing bracket in 4402
 2021-04-15 08:33:30 +02:00
Michael Boelen
dc0cb691e0
Merge pull request #1128 from nberlee/nft-empty-fix 
nftables empy ruleset test fix by reorder --stateless
 2021-04-15 08:33:02 +02:00
Matus Murin
010e68789e
Add missing bracket in 4402 2021-04-14 14:52:04 +00:00
pyllyukko
a8beb37e82
Small typo fix in ACCT-9622 LogText 2021-04-12 22:51:34 +03:00
Christian Bourque
7b632bdbfa Initial draft for Cmd support 2021-04-02 00:37:29 +00:00
Michael Boelen
21219c91eb
Added Devuan 2021-04-01 14:34:26 +02:00
Michael Boelen
a8f7b0cb85
Merge pull request #1108 from schurzi/rounds 
[AUTH-9229] resolve inconsistency with AUTH-9230
 2021-04-01 13:44:17 +02:00
Michael Boelen
aab6af4017
Merge pull request #1118 from steph78630/master 
Add translated status
 2021-04-01 13:34:20 +02:00
Michael Boelen
a59aa785d1
Merge pull request #1123 from sbathe/master 
1122: Add OS detection block for Garuda Linux
 2021-04-01 13:31:59 +02:00
Nico Berlee
7849965d98
nftables empy ruleset test fix by reorder --stateless 2021-03-31 17:05:12 +02:00
Stefan Baumgartner
2be4bcf0d2
Update tests_time 
Fix for TIME-3185 on debian stretch
 2021-03-28 19:16:46 +02:00
Saurabh Bathe
543c41675b 1122: Add OS detection block for Garuda Linux 2021-03-14 17:13:41 +05:30
Nicolai Søborg
3d2f57fe1d
Check MemoryOverwriteRequest Control 2021-03-03 22:38:45 +01:00
Stéphane
3683ffd3c4
Add translated status 2021-03-02 23:31:41 +01:00
Martin Schurz
2d1b217c6c [AUTH-9229] resolve inconsistency with AUTH-9230 2021-01-13 15:07:12 +01:00
teoberi
403a5b5651
Update tests_boot_services 
Modify CONF_FILES variable
 2021-01-09 17:58:02 +02:00
Pavel Malyshev
fba5120f3f 1103: FILE-6430 reports suggestion only when at least one kernel module is not in the blacklist 2021-01-07 17:29:06 -06:00
teoberi
82db002025
Update tests_databases 
Change pattern to detect all configuration files
 2021-01-07 21:16:19 +02:00
Michael Boelen
da1c1eca10
Preparation for release 3.0.3 2021-01-07 15:22:19 +01:00
Michael Boelen
ab1111c0ed
Merge pull request #905 from topimiettinen/check-non-native-binary-formats 
Check for registered non-native binary formats
 2021-01-07 15:16:34 +01:00
Michael Boelen
a2f4d52404
Added CCBINARY and GCCBINARY 2021-01-07 12:36:10 +01:00
Michael Boelen
cd6edc577b
Small style improvement 2021-01-07 11:34:46 +01:00
Michael Boelen
c38c89ae4e
Merge pull request #1004 from Varbin/1003-os-detection 
Test for LINUX_VERSION before setting it again
 2021-01-07 11:30:51 +01:00
Michael Boelen
0abf01b358
Merge pull request #1100 from teoberi/Lynis-with-MariaDB->-10.4 
[DBS-1816] Force test to check only password authentication
 2021-01-07 11:09:40 +01:00
Michael Boelen
c864daa742
Merge pull request #1104 from steph78630/master 
Add and improvements strings (GUI)
 2021-01-06 15:17:34 +01:00
Michael Boelen
a5a0bc0434
Merge pull request #1099 from gcsgithub/master 
fix syntax must include ${}
 2021-01-06 13:59:42 +01:00
Stéphane
f1604c2e55
Add and improvements strings 2021-01-05 11:53:11 +01:00
teoberi
06e3d98c91
Update tests_boot_services 
Add test for ELILO boot loader
 2021-01-03 12:14:24 +02:00
teoberi
49b5398266
Update tests_databases 
Fix the process name for PostgreSQL
Add new path to variable FIND_PATHS
Fix variable CONFIG_FILES
Check permissions for configuration files
 2021-01-03 12:02:38 +02:00
teoberi
e859b89cec
Update consts 
Fix the variable name for PostgreSQL
 2021-01-03 11:54:35 +02:00
teoberi
82e5a8beed
Update tests_databases 
Fix for Test: DBS-1816 - Check empty MySQL root password
 2021-01-03 11:48:34 +02:00
Mark Garrett
c8175cf74d Syntax fix was only valid in ksh93+ 2021-01-03 18:29:17 +11:00
Brian Ginsbach
7292f0f179 KRNL-5677 add NetBSD 
It is possible that NetBSD has the `proc` filesystem mounted. When
`/proc` is mounted there will be a `/proc/cpuinfo`. Handle the simple
case first (`proc` filesystem mounted). There are multiple other means
to determine PAE/NX without `/proc/cpuinfo`.
 2020-12-31 21:02:04 -06:00
Brian Ginsbach
89403f1494 Multiple platform support in Register 
Support specifying multiple platforms with `--platform`. Useful as
not all operating systems identify identical hardware (platforms)
with the same name (example x86_64 and amd64).
 2020-12-31 21:02:04 -06:00
Michael Boelen
8053165d2f
Remove check at this place 2020-12-28 18:34:19 +01:00
Michael Boelen
7f613f17ca
Improved call-to-action when OS is unknown 2020-12-26 15:37:46 +01:00
Michael Boelen
fa69256f45
Added support for Parrot GNU/Linux 2020-12-26 15:36:36 +01:00
Michael Boelen
372c7fb98e
Merge pull request #1087 from konstruktoid/ISSUE1085 
only fail AUTH-9230 if both SHA_CRYPT_{MIN,MAX}_ROUNDS are undefined
 2020-12-24 10:19:25 +01:00
Michael Boelen
44201f02ab
Added elementary OS 2020-12-18 14:04:58 +01:00
Michael Boelen
a26ebd3004
Fix: missing curly bracket 2020-12-17 20:17:52 +01:00
Michael Boelen
8fb98cb25c
Only retrieve exit code 
Redirect output of the count and every error to /dev/null, so we only get the exit code
 2020-12-17 14:51:52 +01:00
Michael Boelen
208518d8fa
Merge pull request #1088 from steph78630/master 
Addition and improvement of translated strings
 2020-12-17 14:23:48 +01:00
Michael Boelen
c9a57d2caf
Merge pull request #1062 from Varbin/solaris-loghost-not-localhost 
Test if loghost is not localhost
 2020-12-17 14:18:31 +01:00
Stéphane
4cf9660185
Adding and improvement translated strings 2020-12-16 01:07:27 +01:00
Thomas Sjögren
60ed001140 indentation 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-15 23:14:03 +01:00
Michael Boelen
701be9852b
Merge pull request #1060 from Varbin/solaris-netstat 
[NETW-3012] Use netstat on Solaris to gather listening ports
 2020-12-15 14:30:09 +01:00
Michael Boelen
258b2bf05f
Merge pull request #1064 from Varbin/solaris-ips-svcs 
Add support for Solaris services, run BOOT-5184 there
 2020-12-15 14:16:18 +01:00
Michael Boelen
15ec001a2a
Merge pull request #1074 from Varbin/german-translation 
Extend German translation and add more translated statuses
 2020-12-15 14:13:03 +01:00
Michael Boelen
6e14b73b0c
Merge pull request #1079 from Varbin/1078-path-spaces 
Quote binary variables during SUID/GID enumeration
 2020-12-15 14:11:08 +01:00
Michael Boelen
d1d3882130
Merge pull request #1076 from Varbin/1075-solaris-hostid 
Use first e1000 interface and break after match (for hostid generation on Solaris)
 2020-12-15 14:10:34 +01:00
Thomas Sjögren
807cfd430a nitpick about new line 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-15 01:45:58 +01:00
Thomas Sjögren
fbb8ffa301 only check the lowest hashing round value, and correct log text 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-15 01:43:10 +01:00
Thomas Sjögren
76e89b525b only fail AUTH-9230 if no _MAX_ROUNDS is defined 
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
 2020-12-14 21:43:14 +01:00
ElviaSchoultz
d5d43c5d1c
Add EndeavourOS to osdetection. 
Fixes problem #1077
 2020-11-24 08:45:58 +11:00
Simon Biewald
f695488ca8 Quote binary variables during SUID/GID enumeration 
Fixes cisofy/lynis#1078.

Signed-off-by: Simon Biewald <sbiewald@fam-biewald.de>
 2020-11-21 01:34:18 +01:00
Simon Biewald
73f39baca8 Use first e1000 interface and break after match 
Fixes CISOfy/lynis#1075.

Before this commit, the interfaces "e1000g1" and "net0" were allowed.
The name "e1000g0" is appended to the list.
After finding an interface, the loop is interrupted now. As previously
"net0" was always used, even if another interface was available, the list
is reordered to "net0 e1000g1 e1000g0" to not break previous generations.

A typo is also fixed ("No interface found op Solaris ..." -> "No
interface found on").

Signed-off-by: Simon Biewald <simon@fam-biewald.de>
 2020-11-14 22:56:42 +00:00