prehistoric-systems/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2026-03-11 08:55:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
2725 commits 2 branches 65 tags 12 MiB
Commit graph

1820 commits

Author SHA1 Message Date
Kristian Schuster
4898e48e16
don't fail relative paths check with spaces in PATH 2019-10-22 21:43:37 +02:00
Kristian Schuster
62feaf3fff
do set variable NTP_CONFIG_FOUND if ntp config is found 2019-10-22 20:07:56 +02:00
Kristian Schuster
66a754fa18
OS-Detection: add raspian detection 2019-10-20 20:21:54 +02:00
Kristian Schuster
ace2e27237
KRNL-5840: add detection for proxmox and raspi kernel 2019-10-20 19:55:34 +02:00
Kristian Schuster
62419033f5
fix for #781 - run lsblk without --paths 2019-10-19 00:34:25 +02:00
Michael Boelen
c16133b255
Merge pull request #772 from Marzal/Marzal-test_storage 
Clean shellcheck warnings in STRG-1846
 2019-10-16 14:49:46 +02:00
Kristian Schuster
4eeb2899cc
add missing variables and replace '\s' to be posix conform 2019-10-15 21:52:53 +02:00
Michael Boelen
7932daca8f
Merge pull request #784 from Schmuuu/krnl/disabled-coredumps-detection 
KRNL-5820: add checks for disabled coredumps in systemd & etc/profile
 2019-10-15 16:06:44 +02:00
Michael Boelen
7ce61bb5dd
Merge pull request #778 from pyllyukko/SINT-7010-MacOS 
Test SINT-7010 in macOS only
 2019-10-15 15:43:26 +02:00
Michael Boelen
6c3fc531ec
Merge pull request #779 from pyllyukko/gradm-stderr 
Redirect gradm stderr to /dev/null
 2019-10-15 15:42:08 +02:00
Michael Boelen
fda0d3cf4a
Merge pull request #770 from Schmuuu/master 
nginx-test: add log file detection for relative paths
 2019-10-15 15:40:30 +02:00
Michael Boelen
1f4092d8e0
Merge pull request #777 from pyllyukko/osdetection-slackware 
Slackware Linux OS detection
 2019-10-15 15:36:31 +02:00
Katarina Durechova
4bb78d721e Databases - variables initialization 2019-10-14 21:50:22 +02:00
Kristian Schuster
3bc70b425e
fix old limits check not working in a few cases 2019-10-13 23:08:19 +02:00
Kristian Schuster
7b52ff52c7
add check for disabled coredumps in etc/profile and systemd 2019-10-13 22:06:50 +02:00
pyllyukko
b771437cd0
Redirect gradm stderr to /dev/null 
If the tool exists but the kernel doesn't have grsec, you'll get the
following error into stderr:

Could not open /dev/grsec.
open: No such file or directory
 2019-10-08 20:52:55 +03:00
pyllyukko
c88953a815
Test SINT-7010 in macOS only 2019-10-08 20:31:35 +03:00
pyllyukko
52cef0ed87
Slackware Linux OS detection 2019-10-08 20:19:30 +03:00
Michael Boelen
52e1231433
Additional check to ensure pacman package manager is used instead of pacman game 2019-10-08 16:43:09 +02:00
Michael Boelen
87f5596952
Added new test DBS-1828 2019-10-08 15:15:18 +02:00
Michael Boelen
f188bac7e8
Update description for FILE-6374 2019-10-08 15:10:02 +02:00
Marzal
f77e56ed4b Prefer [ p ] && [ q ] as [ p -a q ] is not well defined. SC2166 2019-09-29 21:17:52 +02:00
Marzal
a052a107d3 SC2086 2019-09-29 21:15:29 +02:00
Marzal
7d430d5abc rephrasing comment to avioid false positive in lynis-sdk 2019-09-29 21:13:47 +02:00
Kristian Schuster
51d3c56842
crypto-test: suppress errors when devs are not accessible for cryptsetup 2019-09-29 17:44:15 +02:00
Kristian Schuster
001cd85183
kernel-test: additional improvements for required reboot detection 2019-09-29 17:42:07 +02:00
Kristian Schuster
364b770c64
kernel-test: determine reboot requirement for more distros. Plus a few fixes 2019-09-28 00:39:12 +02:00
Kristian Schuster
b38031803d
kernel-test: avoid grep errors if etc/security/limits.d does not exist 2019-09-27 00:07:45 +02:00
Kristian Schuster
07084501b6
kernel-test: add linux-lts detection for arch 2019-09-26 23:26:08 +02:00
Kristian Schuster
d17d30d6a7
nginx-test: add log file detection for relative paths 2019-09-26 21:24:15 +02:00
Michael Boelen
e64e49a551
Merge pull request #763 from Marzal/Marzal-F_isRunning 
Second version of #740 without shellcheck directives
 2019-09-22 15:07:53 +02:00
Michael Boelen
a1b6d463b2
Fixed a typo 2019-09-21 16:31:06 +02:00
Michael Boelen
2c32e8e04d
Merge pull request #765 from Marzal/Marzal-AUTH-9282 
Fix auth-9282
 2019-09-21 15:49:58 +02:00
Michael Boelen
ca1d7ace1d
Merge branch 'master' of https://github.com/CISOfy/lynis 2019-09-21 10:10:09 +02:00
Mike Robinson
8088d0ab77
Update tests_ldap 
Check was backwards
 2019-09-19 18:14:06 -06:00
Marzal
0e1e80bacf Double quote to prevent globbing and word splitting.SC2086 2019-09-19 23:36:36 +02:00
Marzal
42ac40aad6 Change variable name from FIND to FIND_P so is not reset by Register 2019-09-19 23:33:19 +02:00
Marzal
ddd87371b5 Double quote to prevent globbing and word splitting.SC2086 Info 2019-09-19 20:01:31 +02:00
Marzal
09a60783a6 Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.SC2166 2019-09-19 20:00:12 +02:00
Michael Boelen
e48df09c4c
Fixed typo found by SDK 2019-09-19 19:10:13 +02:00
Michael Boelen
187016a051
Changed spacing 2019-09-19 15:23:37 +02:00
Michael Boelen
c0f9c0ab84
Style and log improvements 2019-09-19 14:34:06 +02:00
Michael Boelen
f389cc5d99
Merge pull request #761 from Schmuuu/master 
enhance nginx include config detection …
 2019-09-19 14:21:32 +02:00
Michael Boelen
36627a4eb7
Style improvements 2019-09-19 14:05:15 +02:00
Kristian Schuster
ccb8b2b615
enhance nginx config detection to correctly include confs via relative path and wildcards 2019-09-18 20:47:09 +02:00
Michael Boelen
6cf0b28f2c
Bugfix: line had double print with incorrect quote 2019-09-17 20:13:14 +02:00
Michael Boelen
98017c78ca
Implemented several code style improvements 2019-09-17 14:04:30 +02:00
Michael Boelen
95e9e80834
Moved function 2019-09-14 13:23:28 +02:00
Michael Boelen
13a4dff7fe
Improved logging of HasCorrectFilePermissions function and use correct value when data has a value of zero 2019-09-14 13:22:50 +02:00
Michael Boelen
5c38a0bdb4
Tests using lsof may ignore threads (if supported) 2019-09-13 11:47:39 +02:00
Michael Boelen
ca0239b4d9
[FILE-6374] corrected defaults flag, added root directory, and changed logging 2019-09-12 16:34:45 +02:00
Michael Boelen
79e5b52419
[SSH-7408] added forced-commands-only 2019-09-12 11:17:18 +02:00
Michael Boelen
fa9fdd4322
[MAIL-8804] replaced static strings with translation-aware strings 2019-09-12 11:13:39 +02:00
lowkey
0fc887e830 Removed WARNINGs from unset certificate and private key 2019-09-11 10:47:28 -06:00
Michael Boelen
fbcfab1adc
[LOGG-2154] support new-style rsyslog configuration for remote targets 2019-09-10 14:52:20 +02:00
Michael Boelen
9041517e2a
Added Debian and standardized others 2019-09-03 10:06:26 +02:00
Michael Boelen
0d58ee77a0
[CRYP-7930] replaced incorrect PATH column with alternative 2019-09-02 19:20:16 +02:00
Michael Boelen
a87c2b10f9
Added CRYP-8002 2019-08-29 10:39:43 +02:00
Michael Boelen
4932ab8351
Disabled suggestion for now, as some people will just install a suggested tool to comply instead of determining if it really makes sense. So this suggestion requires more explanation before people turning it on. Also, promisc mode may be impacted, so users see a new issue show up while they just resolved another. 2019-08-28 15:43:10 +02:00
Michael Boelen
61404c1bf3
[TOOL-5160] added support for OSSEC agent daemon 2019-08-28 15:36:59 +02:00
Michael Boelen
7469b4aa72
[CONT-8106] support for newer 'docker info' output that includes additional space 2019-08-26 20:27:00 +02:00
Michael Boelen
f89aa98408
Added FINT-4316 2019-08-26 08:02:11 +02:00
Michael Boelen
22a7f4fd6d
Combine multiple unsets into a single command 2019-08-26 08:01:43 +02:00
Michael Boelen
d703d160ff
Added RHEL, renamed CentOS Linux name, reordered items 2019-08-22 14:20:30 +02:00
Michael Boelen
d2deb63ebb
Added NETW-3200 2019-08-22 14:12:53 +02:00
Michael Boelen
a72650252f
When audit target is missing, stop execution 2019-08-22 14:11:22 +02:00
Michael Boelen
2c4e7711db
Added CentOS and trigger an exception when a system has /etc/os-release but is not defined yet 2019-08-21 14:51:20 +02:00
Michael Boelen
4e39bafd78
New function to display exceptions 2019-08-21 14:50:32 +02:00
Michael Boelen
605e515c31
Updated forensics variable 2019-08-21 14:00:20 +02:00
Michael Boelen
65f1a5e811
Added initial support for DevOps mode to improve continuous integration 2019-08-21 13:59:28 +02:00
Michael Boelen
d395e1a2da
[CRYP-7930] extend test to use cryptsetup/lsblk or crypttab file 2019-08-21 13:50:01 +02:00
Michael Boelen
3db7a3b944
Move -c also to list of deprecated items 2019-08-21 13:48:36 +02:00
Michael Boelen
ee18e76e97
Preparations for forensics scan mode 2019-08-21 13:41:23 +02:00
Michael Boelen
a714568842
Merge pull request #731 from chr0mag/cryp-7930 
[CRYP-7930] Modify to use 'lsblk' and 'cryptsetup'
 2019-08-21 12:31:36 +02:00
Michael Boelen
7dfd580320
Only escape backslash, question mark is not needed 2019-08-20 16:22:00 +02:00
Michael Boelen
8a7f8038b5
Do not show a tool tip if quiet option is used 2019-08-20 16:01:10 +02:00
Michael Boelen
32a895c843
Do not use find command when busybox is used 2019-08-20 15:57:04 +02:00
Michael Boelen
e685182b18
Put in fail-safe options for systems using AIX or busybox 2019-08-20 14:49:34 +02:00
Michael Boelen
a310c43176
Set hyphen as last character to allow it being matched 2019-08-20 14:24:06 +02:00
Michael Boelen
e7d6aaa44d
Stop execution if unexpected characters were found. Also move hyphen to end to list, otherwise it may not work as a matchin character 2019-08-20 14:17:05 +02:00
Michael Boelen
3407a1dbe6
[FILE-7524] optimized test with new function and changed warning to suggestion 2019-08-17 16:49:11 +02:00
Michael Boelen
0a3f42afbc
New function HasCorrectFilePermissions 2019-08-17 16:48:46 +02:00
Yoni Weill
6164b41836 [HOME-9306] s/git-shell/git 2019-08-15 13:27:59 +03:00
Yoni Weill
8c3417dcc2 [HOME-9304] s/git-shell/git 2019-08-15 13:27:19 +03:00
Michael Boelen
a4f13a8ab2
Only do Amazon Linux version detection if /etc/os-release does not exist 2019-08-13 22:09:06 +02:00
Michael Boelen
e5b8047133
Added data and detection of Amazon Linux 2019-08-13 22:00:30 +02:00
Michael Boelen
914f343635
Corrected variable 2019-08-13 21:00:43 +02:00
Michael Boelen
2af2d0a895
[HOME-9306] Added git-shell to ignore list 2019-08-13 20:05:09 +02:00
Michael Boelen
368989d5c4
[HOME-9304] Added git-shell to ignore list 2019-08-13 20:04:14 +02:00
Michael Boelen
1930dbe6c2
Added support for pacman 2019-08-13 20:02:49 +02:00
Michael Boelen
3006b8dd26
[AUTH-9408] both backslash and brackets needs to be individually escaped 2019-08-08 15:05:23 +02:00
Michael Boelen
fdc2977575
[AUTH-9408] corrected description 2019-08-08 13:28:17 +02:00
Michael Boelen
b9fa5bce14
Added more text output for data uploads 2019-08-08 12:38:25 +02:00
Michael Boelen
c86e24fced
Added missing $ 2019-08-08 12:10:30 +02:00
Michael Boelen
f76cf70651
Missing } 2019-08-04 19:40:02 +02:00
Michael Boelen
48ba463376
Added support for swupd (Clear Linux OS) 2019-08-04 19:37:55 +02:00
Michael Boelen
04d2cb838b
Test for presence of /etc/hosts (e.g. Clear Linux OS), changed screen and log output 2019-08-04 19:20:16 +02:00
Michael Boelen
d3355937a4
Don't quote in for loop to prevent glueing individual lines together 2019-08-04 19:19:12 +02:00
Michael Boelen
f2b385fbf7
Initial support for Clear Linux OS 2019-08-04 19:18:16 +02:00
Michael Boelen
da055ae0aa
More standardization of text and adding deprecated functions for transition period 2019-08-01 14:59:03 +02:00