Commit graph

82 commits

Author SHA1 Message Date
Michael Boelen
d88f755f40 [PKGS-7381] check pkg audit and report when the vulnerability database is missing 2016-10-15 16:12:49 +02:00
Michael Boelen
d0d76c44cb Improved logging 2016-10-15 15:38:06 +02:00
Michael Boelen
9caf3005b5 Style improvements and hardening points 2016-09-26 12:05:30 +02:00
Michael Boelen
a3f57e6d01 Mark tests PKGS-7320 and PKGS-7322 as Linux-only 2016-09-24 16:17:11 +02:00
Michael Boelen
98d9096739 Mark arch-audit as a package audit tool 2016-09-24 15:36:45 +02:00
Michael Boelen
1418e0404b Extended message for arch-audit 2016-09-24 15:34:31 +02:00
Michael Boelen
263c0b558b Changes to show more details for warnings 2016-09-24 15:27:42 +02:00
Michael Boelen
1bc29ebb2e Added solution to arch-audit test 2016-09-24 15:20:24 +02:00
Michael Boelen
1063c8f3e8 Replace calls to binaries and changes in output within report 2016-09-24 15:07:20 +02:00
Michael Boelen
780e66ea81 Use OS full name to detect distribution 2016-09-24 14:58:30 +02:00
Michael Boelen
db419495bf Added support for arch-audit tooling 2016-09-24 14:49:14 +02:00
Michael Boelen
9d91f7dac7 [PKGS-7381] Improved output of log and warning 2016-09-22 14:54:55 +02:00
Michael Boelen
6a7ec8795a [PKGS-7381] Collect FreeBSD details for vulnerable packages 2016-09-22 14:47:06 +02:00
Michael Boelen
82ededed31 Style improvements and command replacements 2016-09-08 21:04:17 +02:00
Michael Boelen
679e8c628e Use detected binaries 2016-08-25 15:31:33 +02:00
Michael Boelen
e176011912 Allow repository update to be disabled 2016-08-11 10:01:29 +02:00
Michael Boelen
f9b2993f35 Removed unneeded field 2016-08-10 07:24:10 +02:00
Michael Boelen
fc2d9b935c Removed unneeded field for warnings and suggestions 2016-08-10 07:13:38 +02:00
Michael Boelen
2fe1819c35 [PKGS-7383] Simplified test 2016-07-31 15:51:34 +02:00
beelsr
4143cd69b5 fix yum gpgenabled check to allow spaces around = (#247)
Issue 245

yum.conf allows an arbitrary number of spaces to surround the equals assignment.
2016-07-30 17:14:51 +02:00
Michael Boelen
cfdc8228fd [PKGS-7388] Readability improvements and initialization 2016-07-30 16:40:44 +02:00
Michael Boelen
2f4c854ba7 Rename of categories, introduction of groups 2016-07-24 17:22:00 +02:00
Michael Boelen
983e293eb1 Replaced text strings to allow translations 2016-06-18 11:14:01 +02:00
Michael Boelen
02fdaf4c1e [PKGS-7328] Set non-interactive as first option like other calls to Zypper 2016-05-30 19:43:10 +02:00
Andreas Stieger
ece464b1da improve non-interactive use of zypper (#208)
* PKGS-7328: only list installed items of type package

Otherwise the package list may contain duplicate items of type application or patch

Signed-off-by: Andreas Stieger <astieger@suse.com>

* PKGS-7328, PKGS-7330: run zypper with non-interactive flag

Otherwise the test will hang if zypper issues an interactive query or warning,
such as for new/changed keys, network issues or other errors.

Signed-off-by: Andreas Stieger <astieger@suse.com>
2016-05-30 19:20:37 +02:00
Michael Boelen
90f196f067 [PKGS-7381] Check for vuln.xml file 2016-05-04 21:59:52 +02:00
Michael Boelen
eded02cfde Rewritten counters and dealing with values 2016-05-03 14:57:53 +02:00
Michael Boelen
99236b13f4 Mark apt-get related tests to be root-only 2016-05-02 17:13:31 +02:00
mboelen
42607ceaf5 Replaced old function names with new ones 2016-04-28 12:31:57 +02:00
mboelen
60a7abf877 [PKGS-7354] Test for DNF repoquery plugin before using it 2016-04-21 11:44:42 +02:00
mboelen
95df056ca8 Don't use type -p, as it won't work on all systems 2016-03-24 14:35:12 +01:00
Kamil Boratyński
85236bb996 Added brew as package manager. 2016-03-22 23:06:10 +01:00
Michael Boelen
2fe5fa2cc6 Merge pull request #135 from rhyven/patch-5
Accept apt-get as a package audit tool
2016-03-16 11:02:35 +01:00
Eric Light
a97bcb2142 Accept apt-get as a package audit tool 2016-03-14 12:02:18 +13:00
mboelen
8cc47819b4 Removed copyright line, added description 2016-03-13 16:03:46 +01:00
mboelen
6197ac08e7 Added link to website, blog, github 2016-03-13 16:00:39 +01:00
mboelen
647b482c53 Use the right columns from DNF to split package name and version 2016-01-25 15:47:24 +01:00
mboelen
d3e58a0537 Adjusted stderr redirecting and improve logging of packages 2016-01-25 15:38:46 +01:00
mboelen
5c53d16189 Show on screen if vulnerable packages are found 2016-01-25 15:04:46 +01:00
mboelen
acafb316d3 Add warning if DNF found vulnerable packages 2016-01-25 13:57:31 +01:00
mboelen
727ff26283 Show on screen that DNF is being used 2016-01-25 13:52:58 +01:00
mboelen
e3c88fe766 Additional DNF tests 2016-01-25 13:43:05 +01:00
mboelen
1e12852b12 Initial support for DNF package manager 2016-01-25 13:18:59 +01:00
mboelen
d16b38eff8 Rename of logtext and report functions, upcoming year change 2015-12-21 21:17:15 +01:00
mboelen
83a44827e0 Define queryformat for rpm command 2015-12-21 19:20:34 +01:00
mboelen
360e6b66f6 Split name and version information for RPM based package manager 2015-12-21 19:10:22 +01:00
mboelen
756c09cb4a Added YUM details 2015-11-18 15:57:33 +01:00
mboelen
c68b70ff2e Extended YUM test for security plugin testing 2015-11-18 15:55:49 +01:00
mboelen
69cbabfed2 Log when vulnerable packages are found 2015-10-21 21:45:53 +02:00
SiemKorteweg
bf1da50c14 Combine "sort | uniq" into "sort -u" to reduce the number of processes used for running Lynis. The busybox version of sort also supports the -u option. 2015-10-04 17:59:28 +02:00