prehistoric-systems/lynis
1
0
Fork 0
mirror of https://github.com/CISOfy/lynis.git synced 2026-03-11 08:55:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
3021 commits 2 branches 65 tags 12 MiB
Commit graph

1994 commits

Author SHA1 Message Date
Michael Boelen
db0ebcd374 Improved logging 2016-10-27 09:21:56 +02:00
Michael Boelen
5488c6fc4b Missing exclamation mark 2016-10-27 09:19:37 +02:00
Michael Boelen
0d66aec62c [AUTH-9234] style and enhanced support for macOS 2016-10-27 09:13:57 +02:00
Michael Boelen
ef7a120997 [AUTH-9234] support for macOS user gathering 2016-10-27 08:56:52 +02:00
Justin P
e687b20866 Updates to include/tests_authentication (#308) 
* adjusted.
For test number 9234, added comments stating macOS doesn’t use
/etc/passwd for normal users. macOS uses `opendirectoryd` as the
backend for user management. So, `dscacheutil` is the recommended
program to parse that information. I input a sample line as a comment
in the test area.

* Revert "adjusted."

This reverts commit 2166e5da94.

* Test 9208 and 9234 Updated

For test number 9208, the LogText was clumsily written. Text has been adjusted.
For test number 9234, added comments stating macOS doesn’t use `/etc/passwd` for normal users. macOS uses `opendirectoryd` as the backend for user management. So, `dscacheutil` is the recommended
program to parse that information. I input a sample line as a comment in the test area.

* Test 9208 and 9234 Updated

For test number 9208, the LogText was clumsily written. Text has been adjusted.

For test number 9234, added comments stating macOS doesn’t use `/etc/passwd` for normal users. macOS uses `opendirectoryd` as the backend for user management. So, `dscacheutil` is the recommended
program to parse that information. I input a sample line as a comment in the test area.
 2016-10-27 08:46:23 +02:00
Michael Boelen
db7bff9cb2 Missing fi in BOOT-5139 2016-10-26 13:31:59 +02:00
Michael Boelen
e96a31eab4 Style improvements 2016-10-26 12:58:51 +02:00
Michael Boelen
4886054187 Style improvements 2016-10-26 12:55:46 +02:00
Michael Boelen
e54bae0c6d Merge branch 'master' of https://github.com/CISOfy/lynis 2016-10-26 12:54:59 +02:00
marcus-cr
94d31bba22 NETW-3030 - DHCPD Support Added (#299) 
Added support for DHCPD
 2016-10-26 12:37:35 +02:00
marcus-cr
9208125c06 Malware Scanner Colors for Personal Machine Role (#301) 
Results for malware scanner will show  different color for “personal”
machine-roles (in yellow) rather than the other roles (in red).

Added for leniency towards typical personal PC users for not having
malware scanner (should be a suggestion).

Also included log text result if no scanner found, regardless of
machine-role.
 2016-10-26 12:36:31 +02:00
marcus-cr
56ce017b4f Updated profiles (#300) 
* Updated profiles

Added “personal” machine-role, changed “desktop” to “workstation”.

* Changed Default Profile

Amended roles of system: changed “desktop” to “workstation”, and added
“personal”.
 2016-10-26 12:35:47 +02:00
Michael Boelen
9203b01f88 [BOOT-5139] support for roles 2016-10-26 12:34:56 +02:00
marcus-cr
b95e44a526 Changed LILO testing depending on server/workstation or personal roles (#302) 
Test will display result in red if no boot loader password set and if
server or workstation role was set. Cosmetic change for log text, one
instead of two log texts.

Test displays result in yellow if using personal machine role as
suggestion for typical users.
 2016-10-26 12:30:31 +02:00
marcus-cr
6c02d49de0 Warning added for missing AIDE config file (#303) 
Warning given if AIDE is detected but no configuration file found.
Without configuration file AIDE will not work.
 2016-10-26 12:28:47 +02:00
Michael Boelen
3a69103a0e Improve versions for macOS 2016-10-26 12:19:01 +02:00
Michael Boelen
9c6864589b Allow x.y.z for macOS versions 2016-10-26 11:53:44 +02:00
Michael Boelen
270f2e4fb1 Improve logging and detection of domain name 2016-10-23 16:25:38 +02:00
Michael Boelen
f18ef5c210 [TIME-3104] extended support for Chrony 2016-10-19 11:28:20 +02:00
marcus-cr
f93573ff60 [MALW-3280] Bitdefender AV Support (macOS) (#293) 
* Support for Bitdefender AV (Mac OS)

* Update CHANGELOG.md
 2016-10-19 11:17:54 +02:00
marcus-cr
9dabecadbf Update tests_time (#294) 2016-10-19 11:17:33 +02:00
Michael Boelen
a60d4b973a Disabled exception for boot loader 2016-10-19 10:07:11 +02:00
Michael Boelen
9a5b5e5a42 [MALW-3280] Added support for Avast on macOS 2016-10-17 20:45:53 +02:00
Michael Boelen
7b8c04c3b1 [BOOT-5202] use generic variables between OSes 2016-10-17 17:24:34 +02:00
Michael Boelen
61fb197638 [BOOT-5202] changes to uptime measurement for macOS and others 2016-10-17 17:18:10 +02:00
Michael Boelen
1641f4c88f Use machine ID if we have no suitable other string yet 2016-10-17 17:16:36 +02:00
Michael Boelen
404bd9ad4c Correct path to cgroup file 2016-10-16 15:51:30 +02:00
Michael Boelen
27054e2f2e Improve logging for non-privileged users 2016-10-16 15:29:50 +02:00
Michael Boelen
99de3bb0b6 Add 'lynis show environment' 2016-10-16 15:23:47 +02:00
Michael Boelen
d0eae6480d Support for Docker container detection 2016-10-16 15:13:04 +02:00
Michael Boelen
c0e63699e5 Added 'lynis show os' command and detection improvement 2016-10-16 12:01:33 +02:00
Michael Boelen
7cc56cf4ea Use ID from /etc/os-release 2016-10-16 11:57:19 +02:00
Michael Boelen
ae02e81101 Improve usage of /etc/os-release 2016-10-16 11:55:11 +02:00
Michael Boelen
fc494a6d3f OS detection of CoreOS 2016-10-16 11:50:23 +02:00
Michael Boelen
22d27434c9 Enhance pkg support on FreeBSD 2016-10-15 16:38:33 +02:00
Michael Boelen
f1c3c23cae Corrected error redirection 2016-10-15 16:22:18 +02:00
Michael Boelen
8777a5e616 Use rootdir and proper error redirection 2016-10-15 16:20:04 +02:00
Michael Boelen
f0b9a64c47 [PKGS-7381] bugfix at detection of pkg tool 2016-10-15 16:16:26 +02:00
Michael Boelen
d88f755f40 [PKGS-7381] check pkg audit and report when the vulnerability database is missing 2016-10-15 16:12:49 +02:00
Michael Boelen
b9561b515b [MACF-6208] Allow non-privileged execution and filter permission issues 2016-10-15 16:08:59 +02:00
Michael Boelen
d0d76c44cb Improved logging 2016-10-15 15:38:06 +02:00
Michael Boelen
b936f3b05b [FIRE-4530] Don't show error on screen for missing IPFW sysctl key 2016-10-15 15:34:03 +02:00
Michael Boelen
c4b6aab8c7 Reversed file check on /dev/pf 2016-10-15 15:28:22 +02:00
Michael Boelen
81024635aa Improve detection of pf on FreeBSD 2016-10-15 15:26:15 +02:00
Michael Boelen
f16315e0d3 Another enhancement for macOS (Sierra) 2016-10-15 11:35:26 +02:00
Michael Boelen
6b79f38b82 Add then statement 2016-10-15 11:35:07 +02:00
Michael Boelen
76277f1bf9 Added process detection for Little Snitch 2016-10-15 11:30:12 +02:00
Michael Boelen
19bfb4a7a4 Version information for macOS 2016-10-15 11:27:04 +02:00
Michael Boelen
fba5140150 [FIRE-4534] detection of Little Snitch 2016-10-15 11:26:51 +02:00
Michael Boelen
7dd3c27b97 Improvements for macOS 2016-10-15 10:43:45 +02:00
Michael Boelen
32711e4155 Added missing quote 2016-10-14 08:57:47 +02:00
Michael Boelen
c87e423196 Added HOSTID2 for macOS platform 2016-10-14 08:49:00 +02:00
Michael Boelen
063f50f39c Add upload-only command 2016-10-13 20:15:00 +02:00
Michael Boelen
622d15321b Added clamconf binary 2016-10-06 11:15:28 +02:00
Michael Boelen
e5e4262fba New group system integrity 2016-10-05 09:50:20 +02:00
Michael Boelen
0cc27b956e New test INSE-8050 2016-10-05 09:50:06 +02:00
Michael Boelen
f0cfab3f04 Style changes and improved detection of Red Hat based clones 2016-09-27 11:20:35 +02:00
Michael Boelen
9caf3005b5 Style improvements and hardening points 2016-09-26 12:05:30 +02:00
Florian Heigl
343eb5304f Add support for Rudder configuration management (#284) 
Rudder (http://www.rudder-project.org) is a config management tool with automatic reporting / dynamic policy adjustment.
The "dynamic" bit happens using FusionInventory.
The config management part uses CFEngine under the hood.
I don't know if hw/os inventory tools also matter in the Lynis report, if yes, I can look into that too.

This patch extends the path searched to detect a running CFEngine agent (and fileserver daemon)
Since the agent is the same, this should immediately detect it.
 2016-09-26 10:34:38 +02:00
Michael Boelen
a3f57e6d01 Mark tests PKGS-7320 and PKGS-7322 as Linux-only 2016-09-24 16:17:11 +02:00
Michael Boelen
870ac295c6 Show possible solution with findings 2016-09-24 15:51:05 +02:00
Michael Boelen
98d9096739 Mark arch-audit as a package audit tool 2016-09-24 15:36:45 +02:00
Michael Boelen
1418e0404b Extended message for arch-audit 2016-09-24 15:34:31 +02:00
Michael Boelen
fb88bcaf1f Style improvements 2016-09-24 15:34:05 +02:00
Michael Boelen
263c0b558b Changes to show more details for warnings 2016-09-24 15:27:42 +02:00
Michael Boelen
1bc29ebb2e Added solution to arch-audit test 2016-09-24 15:20:24 +02:00
Michael Boelen
35ef5988e6 Add details to warnings 2016-09-24 15:16:41 +02:00
Michael Boelen
1063c8f3e8 Replace calls to binaries and changes in output within report 2016-09-24 15:07:20 +02:00
Michael Boelen
780e66ea81 Use OS full name to detect distribution 2016-09-24 14:58:30 +02:00
Michael Boelen
db419495bf Added support for arch-audit tooling 2016-09-24 14:49:14 +02:00
Michael Boelen
9d91f7dac7 [PKGS-7381] Improved output of log and warning 2016-09-22 14:54:55 +02:00
Michael Boelen
6a7ec8795a [PKGS-7381] Collect FreeBSD details for vulnerable packages 2016-09-22 14:47:06 +02:00
Alex Zepeda
100afa5f5b Skip NTP checks from within a FreeBSD jail (#281) 2016-09-22 11:39:55 +02:00
Michael Boelen
76aece2e61 Removed warning and added more report data 2016-09-14 13:15:10 +02:00
Michael Boelen
df2fff6cc7 Added NAME-4408 to check localhost to IP mapping 2016-09-13 17:27:25 +02:00
Michael Boelen
86051feaf8 Correct ServerAlias test 2016-09-10 16:16:58 +02:00
Michael Boelen
903016df36 Code cleanups and generic enhancements 2016-09-10 16:12:44 +02:00
Michael Boelen
2534fb99a9 Added file, head, mount, uname, uniq, wc, and xargs 2016-09-10 16:12:15 +02:00
Michael Boelen
9e7dfd52d8 Initialize variables for binaries 2016-09-10 16:11:43 +02:00
Michael Boelen
2b005afd04 Add cut and sed to binary list 2016-09-08 21:04:35 +02:00
Michael Boelen
82ededed31 Style improvements and command replacements 2016-09-08 21:04:17 +02:00
Michael Boelen
81d8486cb0 [CRYP-7902] Gather more certificate details and style improvements 2016-09-08 21:04:02 +02:00
BlueC0re
a596bdc349 added TRBINARY + fix nftables check (#276) 
fixes #273
 2016-09-06 20:58:30 +02:00
Michael Boelen
5b2d1570db [KRNL-5820] Corrected function and style changes 2016-09-06 20:57:47 +02:00
Michael Boelen
737b9359ae Renamed tr command 2016-09-05 22:01:02 +02:00
Michael Boelen
1a832476bb [TIME-3104] Changed timedatectl test 2016-09-05 19:48:23 +02:00
alobodzinski
01c687eb55 FILE-6336: Fixed flawed logic: work correctly even if there is no swap at all (#272) 2016-09-05 19:30:04 +02:00
Michael Boelen
0a0453e1bc [FILE-6344] Adjusted /proc test 2016-09-05 19:28:44 +02:00
Michael Boelen
2eb6d908e1 Style improvement and extended log messages 2016-09-05 12:56:58 +02:00
Michael Boelen
2942b4196b Added test FIRE-4540 and textual changes 2016-09-05 12:29:04 +02:00
Michael Boelen
cbed07cdb2 [LOGG-2146] Changed text and style 2016-09-05 11:54:42 +02:00
Michael Boelen
04f9fae67c [FIRE-4520] Use discovered pfctl binary and style improvement 2016-09-05 11:22:39 +02:00
Michael Boelen
042e52c0b9 [FIRE-4520] Remove suggestion 2016-09-05 11:21:27 +02:00
Michael Boelen
08036358ea Style changes 2016-09-01 17:33:18 +02:00
Rutger van Sleen
67b1abedfa Fix sed syntax for ServerAlias removal 
When a Apache config directive is in use, it has whitespace(s) or nothing at all prepended. Assuming that it always has a space before it doesn't have to match.
 2016-08-30 20:03:38 +02:00
afa-
4e139f4d71 Check for arpon as ARP monitoring software (#267) 2016-08-29 19:31:17 +02:00
alobodzinski
639c5adc72 Fixed cut-and-paste error (#265) 2016-08-29 19:31:06 +02:00
Mark Ruys
e6a829b6ed GlusterFS mounts are nodev and nosuid by default, and are invalid mount options. So ignore GlusterFS mount points. (#268) 2016-08-29 19:30:48 +02:00
Michael Boelen
1ea2578494 Split of Docker tests 2016-08-29 19:26:35 +02:00
Michael Boelen
facb68bc32 Added base64 binary 2016-08-29 10:06:41 +02:00
Michael Boelen
a425e9b0a1 Added 'details' to help 2016-08-26 14:08:24 +02:00
Michael Boelen
fdf3ded89f New command 'lynis show details' to display test details 2016-08-26 14:05:20 +02:00
Michael Boelen
8de53d87be Added missing dollar sign 2016-08-26 11:59:51 +02:00
Michael Boelen
679e8c628e Use detected binaries 2016-08-25 15:31:33 +02:00
Michael Boelen
a6b04a3ace Added sort to list of binaries 2016-08-25 15:30:25 +02:00
Michael Boelen
2f4d65b831 Style changes 2016-08-25 15:25:51 +02:00
Michael Boelen
dfb025a863 [AUTH-9204] style changes and add data to report 2016-08-25 15:18:44 +02:00
Michael Boelen
cc5142329b [FILE-6362] added details 2016-08-24 11:37:25 +02:00
Michael Boelen
e3af7c3727 [DBS-1816] Set skip reason variable 2016-08-24 11:36:51 +02:00
Michael Boelen
5ab139931d [FILE-6362] optimized test, style, removed warning 2016-08-24 11:36:16 +02:00
Michael Boelen
c11f7fc1ce Do not show update message when using 'show' helper 2016-08-23 20:21:26 +02:00
Michael Boelen
b85c782fae Added LOGG-2192 test 2016-08-22 12:21:43 +02:00
Michael Boelen
c061d31bde Change text of AppArmor test and add more details to report 2016-08-22 12:12:38 +02:00
Michael Boelen
b01c801a39 Added aliases for --tests-from-group 2016-08-18 22:00:05 +02:00
Michael Boelen
7744aa87ad [BOOT-5108] Support for Syslinux bootloader 2016-08-18 15:31:51 +02:00
Michael Boelen
8fcc2d7e12 [LOGG-2190] ignore files in /tmp caused by early MySQL 5.x releases 2016-08-18 15:25:57 +02:00
Eric Light
b1bf319f18 Filter out open+deleted files held by MySQL <5.6 (#210) 
Resolves #209
 2016-08-18 15:09:59 +02:00
Michael Boelen
d95ab3d253 Support sysctl checks with multiple profiles 2016-08-18 14:35:20 +02:00
cnrat
4368b59a1d Fix FILE-6344 bug (#263) 
The result of mount command returns like
/proc on /proc type proc (rw,hidepid=2)

Witch means the regular expression should be '^/proc' not '^proc' or you can grep nothing. :P
 2016-08-18 11:48:45 +02:00
Michael Boelen
0050c993f8 [FILE-6374] Improved logging 2016-08-17 11:54:57 +02:00
Michael Boelen
315c619825 [KRNL-5830] Improved logging 2016-08-17 11:49:02 +02:00
Michael Boelen
0dab1e9308 Allow multiple level of includes 2016-08-16 08:36:42 +02:00
Michael Boelen
4b96452dab Clean out unneeded file 2016-08-16 08:11:51 +02:00
Michael Boelen
1b30f6e558 Extended nginx testing 2016-08-16 08:08:15 +02:00
Michael Boelen
2bbc17868d Added --bin-dirs option 2016-08-16 08:07:52 +02:00
Michael Boelen
c730a3185e Add StoreNginxSettings function to store parsed nginx configuration 2016-08-16 08:07:08 +02:00
Michael Boelen
a0e289d73f Replace / with root directory 2016-08-15 20:00:54 +02:00
Michael Boelen
242f91ab97 Added --rootdir for forensics 2016-08-15 19:50:52 +02:00
Michael Boelen
bf7b8ab44e Changed text for Redis test 2016-08-14 20:43:05 +02:00
Michael Boelen
db88216326 Define Redis (server) running status in report 2016-08-13 17:05:38 +02:00
Michael Boelen
05585fab62 Add support for multiple Redis configuration files and permission check 2016-08-13 17:03:36 +02:00
Michael Boelen
e06db1477d Add notebook hardware detection 2016-08-13 16:38:07 +02:00
Michael Boelen
67a636f351 Merge branch 'master' of https://github.com/CISOfy/lynis 2016-08-13 11:19:15 +02:00
Michael Boelen
a928d57804 Add more details to report 2016-08-13 11:18:34 +02:00
Michael Boelen
1ae7028982 Add details on why a test is skipped 2016-08-13 11:17:01 +02:00
Michael Boelen
89cb348950 Variable for reason why tests are skipped 2016-08-13 11:16:37 +02:00
Michael Boelen
bc87855b6f Aligning of code 2016-08-13 11:16:08 +02:00
Michael Boelen
ed9c6190a7 Corrected setting display for show-tool-tips 2016-08-13 11:15:48 +02:00
Michael Boelen
e0f50e9e25 Always register strict code checking in settings 2016-08-13 11:13:44 +02:00
Michael Boelen
075a69e125 Extended example 2016-08-13 10:48:35 +02:00
Michael Boelen
d5a5cc3173 Allow logging a custom reason to skip a test 2016-08-13 10:16:15 +02:00
Michael Boelen
6fde12e579 Extended details for Redis tests 2016-08-13 10:06:34 +02:00
Michael Boelen
f4ed6f11df Adjusted setting in registration 2016-08-13 10:06:09 +02:00
Michael Boelen
75d7c5dad6 Show logging of tests that have incorrect OS 2016-08-13 10:03:33 +02:00
Michael Boelen
e691cb9faf Added aliases for several settings 2016-08-13 09:53:14 +02:00
Michael Boelen
b90ce88b36 Added comment to debug setting 2016-08-13 09:51:02 +02:00
Michael Boelen
bcf69503bc Added more aliases 2016-08-13 09:48:56 +02:00
Michael Boelen
2767cc2915 Added connections-max-wait-state setting alias 2016-08-13 09:47:50 +02:00
Michael Boelen
bcfdcc2b97 Add show-report-solution setting 2016-08-13 09:45:38 +02:00
Michael Boelen
4eafdb6c85 [HRDN-7230] extended test and style change 2016-08-13 09:30:16 +02:00
erialor
32320b5575 Update tests_php (#261) 
Adding PHP5.6
 2016-08-12 19:14:09 +02:00
Michael Boelen
889a57fc03 Added DBS-1888 to test for Redis bound to localhost 2016-08-12 09:57:03 +02:00
Michael Boelen
1a6da63427 Added DBS-1886 to find renamed CONFIG command in Redis 2016-08-12 09:53:28 +02:00
Michael Boelen
c761fe8106 Redefined test with requirepass option 2016-08-12 09:46:13 +02:00
Michael Boelen
30cb17cbc4 Added Redis tests DBS-1882 and DBS-1884 2016-08-11 19:56:33 +02:00
Michael Boelen
aaa89fc6ce Set initial root directory to '/' 2016-08-11 19:55:29 +02:00
Michael Boelen
300ab03abc Improved SearchItem function and allow masking of sensitive details 2016-08-11 19:52:15 +02:00
Michael Boelen
fa8826f59a Corrected text 2016-08-11 19:29:57 +02:00
Michael Boelen
e78e7801ab Allow ExitFatal with text and test for input file on other tests 2016-08-11 19:03:01 +02:00
Michael Boelen
bba7cfe200 Add return value to SearchItem() function 2016-08-11 18:46:17 +02:00
Michael Boelen
4f72cdf711 Mark VM type as OpenStack 2016-08-11 10:01:57 +02:00
Michael Boelen
e176011912 Allow repository update to be disabled 2016-08-11 10:01:29 +02:00
Liao Tonglang
b1c432c3e0 Make IsVirtualMachine detect centos6.8 on openstack (#258) 
These function made mistake in centos 6.8 virtual machine. Only dmicecode work
on these environment and it return Openstack Nova. A openstack case is needed
in codes that check $SHORT codes.
 2016-08-11 09:41:07 +02:00
Michael Boelen
f9b2993f35 Removed unneeded field 2016-08-10 07:24:10 +02:00
Michael Boelen
fc2d9b935c Removed unneeded field for warnings and suggestions 2016-08-10 07:13:38 +02:00
Michael Boelen
0115695d61 Removed unneeded field for warnings and suggestions 2016-08-10 07:13:33 +02:00
Michael Boelen
621e732797 Removed unneeded field for warnings and suggestions 2016-08-10 07:13:27 +02:00
Michael Boelen
3773e91597 Removed unneeded field for warnings and suggestions 2016-08-10 07:13:19 +02:00
Michael Boelen
c3d438272f Removed unneeded field for warnings and suggestions 2016-08-10 07:13:10 +02:00
Michael Boelen
6392bc08d1 Removed unneeded field for warnings and suggestions 2016-08-10 07:13:04 +02:00
Michael Boelen
b2ee2ffff1 Removed unneeded field for warnings and suggestions 2016-08-10 07:12:58 +02:00
Michael Boelen
3c4aee1358 Removed unneeded field for warnings and suggestions 2016-08-10 07:12:54 +02:00
Michael Boelen
74a11c97e7 Removed unneeded field for warnings and suggestions 2016-08-10 07:12:46 +02:00
Michael Boelen
f14072d216 Removed unneeded field for warnings and suggestions 2016-08-10 07:12:41 +02:00
Michael Boelen
dddfbdcb0a Removed unneeded field for warnings and suggestions 2016-08-10 07:12:35 +02:00
Michael Boelen
1715a1e2b5 Removed unneeded field for warnings and suggestions 2016-08-10 07:12:29 +02:00
Michael Boelen
387df54859 Removed unneeded field for warnings and suggestions 2016-08-10 07:12:22 +02:00
Michael Boelen
d719706ecd Merge branch 'master' of https://github.com/CISOfy/lynis 2016-08-09 15:16:24 +02:00
Michael Boelen
f434432954 [AUTH-9328] Test /etc/profile.d first for customizations of umask 2016-08-06 10:13:33 +02:00
alobodzinski
1d63d89dfd OS_KERNELVERSION_FULL is set only on Linux, OS_KERNELVERSION is not set on AIX, HP-UX, and Solaris (#254) 
Set initial values
 2016-08-04 14:24:44 +02:00
Michael Boelen
8a67003c0d Show --log-file on its own line 2016-08-02 15:50:17 +02:00
Michael Boelen
3c46482a9e Readability and style improvements 2016-07-31 21:20:38 +02:00
Michael Boelen
9874530615 Override reading of files when we are root 2016-07-31 21:18:56 +02:00
Michael Boelen
290252b764 [AUTH-9212] Added prerequisite to log 2016-07-31 21:15:31 +02:00
Michael Boelen
d8ab98b845 [KRNL-5830] ignore rescue image for kernels 2016-07-31 21:09:05 +02:00
Michael Boelen
6283b9a7dd Code cleanup 2016-07-31 21:04:07 +02:00
Michael Boelen
1d2405cdaa Improve logging 2016-07-31 20:58:29 +02:00
Michael Boelen
039a829457 Style and readability improvements 2016-07-31 17:35:35 +02:00
Michael Boelen
66a871a07a Added missing dollar 2016-07-31 17:28:55 +02:00
Michael Boelen
9ae1aa749d Properly replace setting gathered from profiles 2016-07-31 17:18:36 +02:00
Michael Boelen
ff38336e0b [KRNL-5830] Readability and style improvements 2016-07-31 16:28:17 +02:00
Michael Boelen
0993c0a13b Style and readability improvements 2016-07-31 15:58:20 +02:00
Michael Boelen
2fe1819c35 [PKGS-7383] Simplified test 2016-07-31 15:51:34 +02:00
Michael Boelen
1e62769ce0 [MAIL-8818] Style and refactoring 2016-07-31 15:43:06 +02:00
Michael Boelen
5e2f6d256b Removed word 'checking' from several tests' and style improvements 2016-07-31 13:53:26 +02:00
Michael Boelen
6426ce68c0 [AUTH-9216] Simplified test and make it more efficient 2016-07-31 13:45:21 +02:00
Michael Boelen
2b4d7a1e85 [AUTH-9218] Clean ups and improve readability 2016-07-31 13:34:17 +02:00
Michael Boelen
23e400ea9e More style and text changes, and removed warning 2016-07-31 13:29:23 +02:00
Michael Boelen
1b3cdb9883 [AUTH-9226] Style, text, and removed warning 2016-07-31 13:25:35 +02:00
Michael Boelen
aad8d89bf8 [AUTH-9228] Provide just an suggestion instead of warning 2016-07-31 13:23:09 +02:00
Michael Boelen
8ee6cb42a3 DisplayError can now use an optional exit code to quit the program 2016-07-31 11:46:41 +02:00
beelsr
4143cd69b5 fix yum gpgenabled check to allow spaces around = (#247) 
Issue 245

yum.conf allows an arbitrary number of spaces to surround the equals assignment.
 2016-07-30 17:14:51 +02:00
Michael Boelen
15e364eae6 Initialize variable and unset at end 2016-07-30 16:41:57 +02:00
Michael Boelen
95b24f074f Initialize variables and style improvements 2016-07-30 16:41:34 +02:00
Michael Boelen
4faaa10a8c Initialize variables and cleanup 2016-07-30 16:41:11 +02:00
Michael Boelen
cfdc8228fd [PKGS-7388] Readability improvements and initialization 2016-07-30 16:40:44 +02:00
Michael Boelen
d776c30b06 [AUTH-9406] - Readability and code style changes 2016-07-30 16:08:45 +02:00
Michael Boelen
6375953b26 [PHP-2211] - Readability improvement and code style changes 2016-07-30 16:03:35 +02:00
Michael Boelen
c74c572422 [FILE-6332] Enable testing for UUID usage with blkid command 2016-07-30 14:10:29 +02:00
Michael Boelen
220476d955 Test for blkid binary 2016-07-30 14:09:44 +02:00
Michael Boelen
9b9a97bceb [DBS-1880] Corrected variable name and style 2016-07-30 14:03:28 +02:00
Michael Boelen
c8096dd06c Only show number of running containers when there are any 2016-07-30 14:01:36 +02:00
Michael Boelen
7670560c2a [HTTP-6720] Improve readability of test 2016-07-30 13:55:10 +02:00
Michael Boelen
0ec7f45f05 [AUTH-9268] Improve readability of test 2016-07-30 13:54:04 +02:00
Michael Boelen
0e18551b2c Catting of changelog removed 2016-07-30 13:48:22 +02:00
Michael Boelen
b5408e50df Removed unneeded spacing instructions 2016-07-30 13:46:04 +02:00
Michael Boelen
a5baafca02 Determine if all Docker tests should be executed, depending on exit code 2016-07-30 13:23:27 +02:00
Liao Tonglang
3fdb949152 Fix description of CheckFilePermissions (#243) 
* Fix description of CheckFilePermissions 

"Adds a system to a group, which can be used for categorizing" should belong to 
AddSystemGroup but not CheckFilePermissions

* make description of IsVirtualMachine right

"Check if a specific item exists in the report" should no be the description of IsVirtualMachien, change it.
 2016-07-30 12:08:43 +02:00
Michael Boelen
f1dc6be5bf Start of refactor fail2ban tests and splitting them into different test areas 2016-07-30 12:06:30 +02:00
Michael Boelen
af999d3207 Allow strict code checking for developers 2016-07-28 11:39:10 +02:00
Michael Boelen
db5d825701 Check for number of arguments 2016-07-28 11:10:59 +02:00
Michael Boelen
22f99ede81 Check for number or arguments on ReportSuggestion and ReportWarning 2016-07-28 11:06:46 +02:00
Michael Boelen
052350feb4 [FINT-4402] Use correct variable 2016-07-28 10:38:10 +02:00
Michael Boelen
4e3de865ac Extended examples 2016-07-27 13:40:19 +02:00
Michael Boelen
17ab4708ec Removed --info from options, as it has been replaced with 'lynis update info' 2016-07-27 12:17:18 +02:00
Michael Boelen
ff3f13cdd0 Make Lynis run in quick mode by default 2016-07-27 12:14:25 +02:00
Michael Boelen
abf34b56b6 Rephrase suggestion 2016-07-27 09:55:06 +02:00
Michael Boelen
f9a4348f10 Uppercase tests: detect them properly as atomic tests. 2016-07-26 16:01:38 +02:00
Michael Boelen
d23e4b0fa5 Changed header and footer of screen output 2016-07-26 16:00:36 +02:00
Michael Boelen
2d2398714a More spacing in report 2016-07-26 15:33:52 +02:00
Michael Boelen
64075a8497 Replaced function with generic echo, as functions are not available yet 2016-07-26 15:20:18 +02:00
atao60
0b5b4a47a3 Display function creates wrong indentation of result column (#237) 2016-07-26 15:00:05 +02:00
Michael Boelen
532e242a2f Style changes 2016-07-26 14:58:04 +02:00
Michael Boelen
019203e7e8 Typo fix 2016-07-26 14:35:47 +02:00
n[oO]ne
7dbe80c7a4 Make time test 3106 work again (#239) 
There was a little typo in the test
 2016-07-25 09:59:41 +02:00
Michael Boelen
37763dcf4f [DBS-1880] Detection for redis 2016-07-24 19:46:45 +02:00
Michael Boelen
6d6cd79a82 Improve detection and display of gzipped changelog 2016-07-24 17:54:59 +02:00
Michael Boelen
773c410a02 Update remaining items for categories and groups 2016-07-24 17:24:09 +02:00
Michael Boelen
2f4c854ba7 Rename of categories, introduction of groups 2016-07-24 17:22:00 +02:00
Michael Boelen
ee9d7963e7 Add 'lynis show changelog' to display release details 2016-07-24 15:40:55 +02:00
Michael Boelen
9a2dcc9dec Add DisplayError for showing errors on screen 2016-07-24 13:11:32 +02:00
Michael Boelen
65eaeb7ce9 Add header as color 2016-07-24 13:05:36 +02:00
Michael Boelen
c1d351fe32 Add bold as color 2016-07-24 11:43:18 +02:00
Michael Boelen
64348b772c Add category and display more details about tests 2016-07-24 11:42:50 +02:00
Michael Boelen
ccb39d5e52 [PHP-2374] Changed text and cleanups 2016-07-22 15:46:25 +02:00
Michael Boelen
7f25a1f00e Remove colors properly with one function (contribution: Mike Slifcak at Pindrop 2016-07-18 19:58:32 +02:00
Michael Boelen
75d8824d8f Add 'update check' as example 2016-07-18 10:34:10 +02:00
Michael Boelen
6b92407234 Add 'update check' functionality 2016-07-18 10:33:52 +02:00
Michael Boelen
d02cb095da [PHP-2376] Log to discovered item to report instead of logfile 2016-07-16 16:28:43 +02:00
Michael Boelen
7ec51cdae0 Only use license key when it is defined 2016-07-14 15:26:46 +02:00
n[oO]ne
8aeba9fa3d fix: Test names are different. (#228) 
After changes in 9aa5736 the test names are different. This results in something like BOOT-5122 = boot-5122 and skipped test aren't skipped anymore.
 2016-07-14 13:49:20 +02:00
Michael Boelen
9aa57362e6 Show all tests uppercase and remove first space from list for correct display 2016-07-13 13:21:35 +02:00
Michael Boelen
dd378a0ca3 Allow showing categories, logfile, report, and test details 2016-07-13 13:20:55 +02:00
Michael Boelen
f9011c43e6 Exit cleanly when displaying categories 2016-07-13 11:12:31 +02:00
Michael Boelen
09aa31bb5c Minor code cleanup 2016-07-12 20:32:49 +02:00
Michael Boelen
07a113e46e Set initial value for language and improve auto detection 2016-07-12 20:32:15 +02:00
Michael Boelen
cb76421d9c Proper display of tool tips configuration, while not showing tips when using show module 2016-07-12 20:09:10 +02:00
Michael Boelen
c090e73ca1 Add blue colors for tips 2016-07-11 20:06:46 +02:00
Michael Boelen
38e6ff18d4 Merge and initial changes for new tests FILE-6344 and FILE-6430 2016-07-11 19:57:45 +02:00
Lukas Pirl
9a5647f66c added test FILE-6337: check if /proc mounted with hidepid=(1|2) (#225) 
to hide users' sensitive files in /proc from other users
  (see `man proc` for details)
 2016-07-11 16:48:25 +02:00
Lukas Pirl
f19f5927a5 added test for AllowAgentForwarding being turned off (#222) 
for reasons, see links below:
  https://wiki.mozilla.org/Security/Guidelines/OpenSSH#SSH_agent_forwarding
  https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-considered-harmful/
 2016-07-11 11:25:51 +02:00
Michael Boelen
576e11b995 [BOOT-5122] Extended password check 2016-07-11 11:24:52 +02:00
Michael Boelen
09a9b80fde Merge branch 'master' of https://github.com/CISOfy/lynis 2016-07-11 11:21:08 +02:00
ratrop
cd2429688b Update tests_boot_services (#201) 
Added detection of password for Grub2 in Ubuntu 14.04 LTS. Previous version doesn't detect it.
 2016-07-11 11:20:05 +02:00
Michael Boelen
648d043b0a [FILE-6430] initial import and changes 2016-07-11 11:18:53 +02:00
Michael Boelen
d1c8cd3d05 Merge branch 'master' of https://github.com/CISOfy/lynis 2016-07-11 10:32:30 +02:00
Michael Boelen
52317de56c Set date of break lines to similar format as normal log entries 2016-07-11 10:32:00 +02:00
Yann ILAS
a62a09d9e4 Remove the support of some filesystems (#205) 
For now keeping the test as-is and merge.
 2016-07-11 10:24:38 +02:00
Michael Boelen
74c9513fbb [HTTP-6632] fix for proper detection of Apache modules 2016-07-11 09:49:24 +02:00
Michael Boelen
13c228fd2d Add --configured-only option to lynis show settings 2016-07-05 19:57:11 +02:00
Michael Boelen
1655b5728b Disable color status and clear blue color 2016-07-05 19:56:38 +02:00
Michael Boelen
467c30b16b Start of migration of deprecated profile options 2016-07-05 19:56:13 +02:00
Michael Boelen
b44acc16e0 Disable upload compression for now 2016-07-05 19:55:45 +02:00
Michael Boelen
474455d18b Define colors 2016-07-05 19:55:31 +02:00
Michael Boelen
f8bee58ade Implement tooltips 2016-07-05 18:18:54 +02:00
Michael Boelen
bac442c6fe Migrate to new options, including skip-plugins 2016-07-05 17:26:27 +02:00
Michael Boelen
75786a1c80 Added DisplayToolTip 2016-07-05 17:25:19 +02:00
Michael Boelen
0c5387f1fe Migration to new profile names and store the related settings 2016-07-05 16:49:36 +02:00
Michael Boelen
bdf9a5cf04 Add lynis show settings with --brief and --nocolors options 2016-07-05 16:49:10 +02:00
Michael Boelen
5778d4fa0d Add fuctions: AddSetting, DiscoverProfiles, ParseProfiles 2016-07-05 16:47:32 +02:00
Michael Boelen
8b8a1a9b66 [CRYP-7902] Use SSL paths as configured by profile 2016-07-05 16:46:50 +02:00
Michael Boelen
998af3d7de Add variable for settings and SSL paths 2016-07-05 16:45:27 +02:00
Michael Boelen
6c24c198ee [PRNT-2306] Check if files are readable before parsing them 2016-07-05 12:19:43 +02:00
Michael Boelen
fbd24b585a Rename Maid to CleanUp 2016-07-05 12:16:49 +02:00
Michael Boelen
72ca2b926d [AUTH-9254] Only let root use this test, due to permissions 2016-07-05 12:10:32 +02:00
Michael Boelen
c181a5745f [AUTH-9288] Only check for accounts which have a maximum password age set 2016-07-05 10:51:59 +02:00
Michael Boelen
d9b609ed98 Do not provide a tip about uploading data when user is already doing that 2016-07-05 10:40:07 +02:00
Michael Boelen
a1ebc18a76 Don't override variables of ReportDetails functions on every parameter 2016-06-30 11:34:27 +02:00
Michael Boelen
114d95c475 [AUTH-9234] Test for minimal UID number via /etc/login.defs 2016-06-30 11:30:58 +02:00
Michael Boelen
6861e8065f Improve screen output 2016-06-18 11:15:39 +02:00
Michael Boelen
87efe5651f Replaced text strings to allow translations 2016-06-18 11:15:11 +02:00
Michael Boelen
b553f01b2a Allow long lines of text by resetting number of spaces to 0 when needed 2016-06-18 11:14:50 +02:00
Michael Boelen
983e293eb1 Replaced text strings to allow translations 2016-06-18 11:14:01 +02:00
Michael Boelen
1be27c7b00 Added IsDeveloperVersion to detect if release is still under development 2016-06-18 09:28:53 +02:00
Michael Boelen
52ad74c5ce [SSH-7408] Show SSH items as a suggestion on screen, like in the report 2016-06-11 14:45:17 +02:00
Michael Boelen
f8b134f3c3 Add automatic detection of used language 2016-06-11 14:34:21 +02:00
Michael Boelen
f851834dbd Added support for multiple languages 2016-06-11 14:09:41 +02:00
Michael Boelen
7ff4f3b1d3 Add upcoming profile option to choose between upload tools 2016-06-07 17:01:16 +02:00
Michael Boelen
138d1fdcd5 Add comment for upcoming option to choose between upload tools 2016-06-07 17:00:51 +02:00
Michael Boelen
6b05d59855 Add variables for alternative upload tool 2016-06-07 17:00:12 +02:00
Michael Boelen
c88a2678f6 [HTTP-6642] Test disabled 2016-06-07 16:59:37 +02:00
Michael Boelen
02fdaf4c1e [PKGS-7328] Set non-interactive as first option like other calls to Zypper 2016-05-30 19:43:10 +02:00
Michael Boelen
751c9734c5 Restrict find action to the /tmp mount 2016-05-30 19:38:42 +02:00
Michael Boelen
d3202ade5d Properly display lines again after changing date format in log 2016-05-30 19:36:30 +02:00
Andreas Stieger
ece464b1da improve non-interactive use of zypper (#208) 
* PKGS-7328: only list installed items of type package

Otherwise the package list may contain duplicate items of type application or patch

Signed-off-by: Andreas Stieger <astieger@suse.com>

* PKGS-7328, PKGS-7330: run zypper with non-interactive flag

Otherwise the test will hang if zypper issues an interactive query or warning,
such as for new/changed keys, network issues or other errors.

Signed-off-by: Andreas Stieger <astieger@suse.com>
 2016-05-30 19:20:37 +02:00
Michael Boelen
000077d379 Added more tips when cURL has issues uploading the data 2016-05-30 17:06:14 +02:00
Michael Boelen
268ff68966 Added error message when --data-urlencode on cURL is not available 2016-05-30 16:59:29 +02:00
Michael Boelen
7725ce6cc8 Use a common date/time format for log entries 2016-05-25 21:36:12 +02:00
Michael Boelen
e20ef13b48 Change instructions to configure Lynis when using self-signed certificates with upload 2016-05-25 13:43:29 +02:00
Michael Boelen
6f1be4c82a Better display when multiple items are to be configured 2016-05-25 13:29:01 +02:00
Michael Boelen
c42a1d4083 Improve error message when setting already exists 2016-05-24 20:53:16 +02:00
Michael Boelen
a45d6e61f8 Allow automatic configuration of a setting 2016-05-24 20:49:36 +02:00
Michael Boelen
748039358c Remove unneeded quote 2016-05-24 11:31:49 +02:00
Michael Boelen
d2c82adc98 Minor cleanups and add hostid2 value for uploads 2016-05-24 11:28:08 +02:00
Eric Light
47748c8fd8 UseDNS = No is a safer configuration (#204) 
See Issue #197.  

References:
 - https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/424371/comments/11
 - https://unix.stackexchange.com/questions/56941/what-is-the-point-of-sshd-usedns-option
 - https://security.googleblog.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
 2016-05-19 19:58:52 +02:00
Yann ILAS
e8d6308d82 use ${LSMODBINARY} instead of lsmod (#200) 2016-05-19 17:34:35 +02:00
Yann ILAS
770605e4c6 use ${LSMODBINARY} instead of lsmod (#199) 
Use detected lsmod binary instead of calling it directly.
 2016-05-19 17:24:49 +02:00
Yann ILAS
bc313949c8 Add of MODPROBE variable (#202) 
Test for presence of modprobe utility
 2016-05-19 17:23:54 +02:00
Michael Boelen
7b769214cd Split auditd between Linux and Solaris, store if an audit daemon is running 2016-05-19 17:23:01 +02:00
Michael Boelen
9dafcac6b0 Extend configure module to allow making changes to custom.prf soon 2016-05-17 21:39:02 +02:00
Michael Boelen
7b819b4eca Show release as version with release type (e.g. 2.2.0-dev) 2016-05-17 18:12:49 +02:00
Michael Boelen
443497855e Add lynis show hostids to display host IDs 2016-05-17 18:08:08 +02:00
Michael Boelen
0d62613388 Store host IDv2 and detect utilities when no binaries scan has been done 2016-05-17 18:07:43 +02:00
Michael Boelen
933edeeae0 Improve screen output when an error in a profile has been found 2016-05-16 20:56:42 +02:00
Michael Boelen
573698afdb Show debug details on screen in verbose mode 2016-05-16 20:56:16 +02:00
Michael Boelen
f7e353fe17 Report multiple file integrity tools, clean ups, and renumber FINT-4316 to FINT-4402 2016-05-16 20:55:42 +02:00
Michael Boelen
9542dc2f6b Initial import of configure helper 2016-05-15 20:37:10 +02:00
Michael Boelen
bb2c97f9c1 Added --man-page alias 2016-05-15 20:01:32 +02:00
Michael Boelen
c751302a76 Add helper tool 'configure' 2016-05-15 20:00:18 +02:00
Michael Boelen
1cbf7244c2 Added detection and display of profile directory 2016-05-15 14:03:57 +02:00
Michael Boelen
26c67e4ec6 Use full paths when local directory is used for includedir or dbdir 2016-05-15 13:41:03 +02:00
Michael Boelen
098f7685fc Added show dbdir, show includedir, show workdir 2016-05-14 18:04:26 +02:00
Michael Boelen
18fb54e92d Improve screen output of 'lynis update info' 2016-05-14 17:43:40 +02:00
Michael Boelen
e7afd92533 Improve screen output 2016-05-14 17:42:51 +02:00
Michael Boelen
b72b510301 Improve help output and error messages 2016-05-14 17:42:33 +02:00
Michael Boelen
08bad0ffbf Initial support for remote scanning with: lynis audit system remote 2016-05-14 15:44:06 +02:00
Michael Boelen
93074a89ea Initial import of remote system scanning 2016-05-14 15:43:29 +02:00
Michael Boelen
4225611b5b Remove debugging details 2016-05-12 11:21:20 +02:00
Michael Boelen
d6ceeaa11f Clean ups and added hints for contributions 2016-05-11 16:02:46 +02:00
Michael Boelen
5db9d4a4e0 [FILE-6376] Enabled contributed test and enhancements 2016-05-11 15:57:36 +02:00
Yann ILAS
125f704a10 FILE-xyzz : Bind mount the /var/tmp directory to /tmp (#193) 
Check if a bind mount is done between /var/tmp and the directory /tmp
 2016-05-11 15:20:08 +02:00
Yann ILAS
8ba1f51c19 FILE-6372 : error in awk comparaison (#192) 2016-05-11 15:18:39 +02:00
Yann ILAS
8e73f33475 Check of /dev/shm:nosuid,nodev,noexec (#194) 2016-05-11 15:17:50 +02:00
Yann ILAS
527955211b The XFS root FS is not checked (#190) 
At line 431, you should maybe add some tests...
 2016-05-11 15:16:28 +02:00
Michael Boelen
668a1fd0e5 Alignment, restructuring, and quoting of -? option 2016-05-11 15:12:37 +02:00
Michael Boelen
50609242c2 Only use public keys for host ID creation 2016-05-10 14:21:09 +02:00
Michael Boelen
ef23180adc Decrease length of hostid v2 as hostname is stored already 2016-05-10 11:47:33 +02:00
Michael Boelen
41197f722b Added -? argument as alias for --help 2016-05-10 11:47:01 +02:00
Michael Boelen
dfce1a770a Removed local variable assignment to prevent portability issues 2016-05-09 14:20:16 +02:00
Michael Boelen
a40331aedc Clean up unneeded log entries 2016-05-09 13:50:38 +02:00
Michael Boelen
632e8bd47a Show hardware address in log 2016-05-09 13:46:32 +02:00
Michael Boelen
788ab9999d Create a version 2 host ID 2016-05-05 17:49:41 +02:00
Michael Boelen
9f14495d70 Added sha256 and sha256sum utilities 2016-05-05 17:49:04 +02:00
Michael Boelen
90f196f067 [PKGS-7381] Check for vuln.xml file 2016-05-04 21:59:52 +02:00
Michael Boelen
412613e14c Added check-value for custom configurations check 2016-05-04 21:39:13 +02:00
Michael Boelen
076c5dd093 Initial work to profile for custom configurations check (key-value) 2016-05-04 21:38:42 +02:00
Michael Boelen
049569ceca Set default value for CHECK 2016-05-04 13:42:46 +02:00
Michael Boelen
eded02cfde Rewritten counters and dealing with values 2016-05-03 14:57:53 +02:00
Michael Boelen
eda79af419 Minor cleanups, including comment about -c option (deprecated soon) 2016-05-03 13:53:20 +02:00
Michael Boelen
c8c7a11e37 Implemented linter suggestions 2016-05-03 13:16:11 +02:00
Michael Boelen
bbdfce2b05 Performance: only use lshw at end, and when having root privileges 2016-05-03 13:15:46 +02:00
Michael Boelen
dab69d2860 Don't show errors when we are running non-privileged 2016-05-03 13:11:28 +02:00
Michael Boelen
062782e7a5 Remove blank line and space 2016-05-03 12:55:23 +02:00
Michael Boelen
7260f3030c Code rewrites after linting 2016-05-03 12:40:26 +02:00
Michael Boelen
0173bd3832 Code rewrites after linting 2016-05-03 12:40:05 +02:00
Michael Boelen
5339a0d466 Improve readability and add missing ;; 2016-05-03 12:19:26 +02:00
Michael Boelen
9c9ca6f947 Proper call to WaitForKeyPress 2016-05-03 11:00:06 +02:00
Michael Boelen
70fd028713 Remove inclusion of empty tests_custom file 2016-05-03 10:58:41 +02:00
Michael Boelen
924e53ed76 Do an earlier detection of grsecurity and store result, so tests can be simplified 2016-05-03 10:58:05 +02:00
Michael Boelen
2205866521 Remove tabs, test for all Red Hat clones, enhanced text 2016-05-02 19:12:55 +02:00
alobodzinski
2b52276110 - Running lynis from /etc/cron.daily some programs delete in-use files (#186) 
- grep for whole words to ignore
- logging what exactly keeps a file open can be very helpful
 2016-05-02 19:08:11 +02:00
StrangeBubble
3a19887972 Update tests_kernel (#185) 
Error during the process of the FIND variable.
 2016-05-02 17:35:55 +02:00
Michael Boelen
99236b13f4 Mark apt-get related tests to be root-only 2016-05-02 17:13:31 +02:00
Michael Boelen
efebb99da1 Add action to take when a file has not the right permissions 2016-05-02 17:13:06 +02:00
Michael Boelen
6ea27b912c Add owner and group permissions check 2016-05-02 15:45:27 +02:00
mboelen
6e2640c4d5 Retrieve SSH settings from active configuration and store earlier, test with lowercase settings for other tests 2016-05-02 15:04:40 +02:00
mboelen
9208e35f20 Added alias --no-plugins to skip plugins 2016-05-02 13:57:16 +02:00
mboelen
a765163a25 Minor changes to identation and variable names 2016-05-02 13:26:27 +02:00
Eric Light
bcaf7a55ef Remove wchan from PROC-3614, to finish #179 (#182) 
Attempt number two, fixing the awk line this time  :)
 2016-05-02 13:24:19 +02:00
StrangeBubble
81a4821636 Check if file is symlink or not (#184) 2016-05-02 13:23:43 +02:00
mboelen
1a680c294f Replace incorrect function call to report 2016-04-28 12:58:33 +02:00
mboelen
43f6baeb2e Replaced old function names with new ones 2016-04-28 12:32:18 +02:00
mboelen
42607ceaf5 Replaced old function names with new ones 2016-04-28 12:31:57 +02:00
mboelen
539bd49856 Big overhaul of functions file. Cleaning up, structurizing, and adding comments 2016-04-28 12:31:38 +02:00
mboelen
9e312f5a5f Replaced functions and minor cleanups 2016-04-28 09:15:54 +02:00
mboelen
5e587adf8a Change ntp_falseticker in report, added ntp_unreliable_peer 2016-04-28 08:51:43 +02:00
mboelen
f109c318d9 Detect when weak protocols are used, simplify nginx test 2016-04-27 16:51:12 +02:00
mboelen
1825d91c85 [HTTP-6710] Show suggestion when using a weak protocol 2016-04-27 16:37:32 +02:00
mboelen
eb0206198a [HTTP-6710] Show SSLv3 as weak protocol 2016-04-27 16:36:24 +02:00
mboelen
7c4099a7da Call WaitForKeypress from wait_for_keypress, and report this old function when called to developers 2016-04-27 16:14:22 +02:00
mboelen
f4691536ee Add nginx ssl_protocol values to report, minor adjustments to ReportDetails function 2016-04-27 16:09:29 +02:00
mboelen
b453190cd7 Added firewall_software[] to report 2016-04-27 10:52:45 +02:00
mboelen
84d619852a [PROC-3612] Removed wchan from output to solve issue with grsecurity-enabled kernel 2016-04-27 10:30:40 +02:00
mboelen
6a4287bd64 Proper reference to IsDeveloperMode 2016-04-26 21:25:14 +02:00
mboelen
b6884dfda3 Add file permission and ownership tests for cronjobs 2016-04-26 21:21:15 +02:00
mboelen
c98b37955c Added IsOwnedByRoot function 2016-04-26 21:20:37 +02:00
mboelen
098a2e3760 Added istat binary 2016-04-26 21:20:17 +02:00
mboelen
e20404c60b Add test for world-writable cronjobs 2016-04-26 14:06:27 +02:00
mboelen
7b33ead897 Adding aliases and optimization for value testing 2016-04-26 14:05:56 +02:00
mboelen
216611259e Optimize IsWorldWritable function, with additional debugging data for developers 2016-04-26 13:52:26 +02:00
mboelen
812a0ea270 Added developer-mode option for profiles 2016-04-26 13:51:54 +02:00
mboelen
55799a524c Added developer mode (--developer) 2016-04-26 13:40:21 +02:00
mboelen
2cefdb79d6 Log when a file is world-writable according IsWorldWritable 2016-04-26 13:34:17 +02:00
mboelen
4791b8a6bf Add scheduler[] and minor cleanups 2016-04-26 13:05:17 +02:00
mboelen
448fd65e31 Remove tab 2016-04-26 13:00:41 +02:00
mboelen
705e2444ee [SCHD-7702] Added test to check cron daemon status 2016-04-26 12:58:17 +02:00
mboelen
ea9c40a36c Changed text to avoid showing up as a suggestion 2016-04-25 20:48:21 +02:00
mboelen
ee7b5f87bb [BANN-7119/BANN-7122] Disabled tests 2016-04-25 20:04:23 +02:00
mboelen
7878fad617 Removed --config option in favor of lynis show profiles 2016-04-25 20:04:00 +02:00
mboelen
4dcb9eccff Allow skipping of plugins with --skip-plugins or skip-plugins 2016-04-25 16:00:10 +02:00
mboelen
e5790dc8c6 Added: lynis show tests skipped (skipped tests) 2016-04-25 15:49:45 +02:00
mboelen
ba0381a775 Lowercase all tests when using them in comparisons 2016-04-25 15:49:00 +02:00
mboelen
c02ab08b50 Set quiet and quickmode when using --show-warnings-only or show-warnings-only 2016-04-25 11:51:37 +02:00
mboelen
bedadd9cd1 Do not show text on screen in quiet mode 2016-04-25 11:13:27 +02:00
mboelen
2f07fa1d87 Allow show-warnings-only and --(show-)warnings-only option 2016-04-25 11:10:23 +02:00
mboelen
3e20c1e30b [KRNL-5788] Improvements for grsecurity kernels 2016-04-25 10:56:11 +02:00
mboelen
0f64d106b1 Changed supporting text for ReportManual function 2016-04-25 10:55:34 +02:00
mboelen
eae8ef99a4 Exit with exit code 0 by default, unless error-on-warnings is being used 2016-04-25 10:18:09 +02:00
Eric Light
bcdca90942 Update KRNL-5788 for grsecurity (#178) 
* If grsec installed, build FINDKERNEL from uname -r

When running a grsecurity-patched custom kernel, the /vmlinuz link is often missing.  If this link is missing, and grsecurity is installed, then we can calculate the location of FINDKERNEL with the words "linux-image-", plus the output of "uname -r".

* Suggest manually checking kernel if grsec installed

We can't rely on the apt-cache output when running grsecurity.  This is because apt-cache can't tell us if we're running an up-to-date kernel, when it's a custom kernel with grsecurity.  Instead of confirming that the kernel is OK, we instead should remind the auditor to double-check themselves.
 2016-04-25 09:34:14 +02:00
Eric Light
c0f86fef09 Minor reword ("latest" -> "latest installed") (#174) 2016-04-25 09:33:55 +02:00
mboelen
904da4d123 Allow additional profile with --profile 2016-04-23 17:55:32 +02:00
mboelen
60a7abf877 [PKGS-7354] Test for DNF repoquery plugin before using it 2016-04-21 11:44:42 +02:00
mboelen
821be1ea0c Remove color between categories, to prevent new users missing that on white background 2016-04-20 14:14:10 +02:00
mboelen
560acfadf6 Log what particular atomic test has been skipped and why 2016-04-20 12:08:34 +02:00
mboelen
5757837e28 Show skipped items when running in verbose mode 2016-04-20 12:08:10 +02:00
Eric Light
a6393bd8a0 Display skipped atomic tests (#169) 
Added section to log & display skipped atomic tests.
 2016-04-20 10:46:40 +02:00
mboelen
f915df67d1 Add --verbose option 2016-04-19 21:11:42 +02:00
mboelen
b1403aac20 Only show specific status of services when using --verbose 2016-04-19 21:09:27 +02:00
mboelen
5996dcdc95 Add verbose option to profiles 2016-04-19 19:47:50 +02:00
mboelen
f0e7b531cd Add --verbose option 2016-04-19 19:46:20 +02:00
mboelen
64561d4b07 Add IsDebug and IsVerbose functions 2016-04-19 19:44:23 +02:00
mboelen
d54f3ae307 Collect more ideas for improving the show command 2016-04-19 19:43:51 +02:00
mboelen
c1f0b5e8b0 Allow usage of quick=yes in profile 2016-04-19 18:01:48 +02:00
mboelen
c2d5d93fad Colored output for debug details on screen 2016-04-19 18:01:16 +02:00
mboelen
1f0261f168 Add details to AddHP function 2016-04-19 17:48:06 +02:00
mboelen
166c35bc69 Change color when UEFI is disabled 2016-04-19 17:45:46 +02:00
mboelen
2a22e5c42a Renamed logtext and report function calls 2016-04-19 17:43:33 +02:00
mboelen
11d0dabf4f [FILE-6372] Ignore comments in /etc/fstab 2016-04-19 17:39:01 +02:00
mboelen
5aa1a27e32 Cleanup 2016-04-19 17:36:53 +02:00
mboelen
6d512f48ac Improved text for assigning hardening points 2016-04-19 17:35:45 +02:00
mboelen
a2514f20e1 Improve logging to state what directory will be scanned 2016-04-19 17:25:25 +02:00
mboelen
a3ae0a450a No breaks betweens directories 2016-04-19 17:24:08 +02:00
mboelen
2d7ef97605 Consider binaries check as a core test 2016-04-19 17:23:12 +02:00
mboelen
a23758e21f Replace = signs to simplify parsing of data 2016-04-19 13:56:28 +02:00
mboelen
3008727ce0 Log exit code of upload activities 2016-04-19 13:56:00 +02:00
mboelen
2886ad0b7e Allow skipping of tests 2016-04-19 12:38:00 +02:00
mboelen
a2594fc370 [SSH-7408] Allow skipping some of the SSH tests 2016-04-19 12:37:40 +02:00
mboelen
e9eae5b8b5 Allow skipping of individual tests or atomic tests 2016-04-19 12:37:00 +02:00
mboelen
1af95edd8a Updated ReportDetails call with service name 2016-04-19 12:05:13 +02:00
mboelen
0783b2fd4b Use SSH configuration from sshd instead of configuration file, add more details to report 2016-04-19 12:04:51 +02:00
mboelen
e68d9e0dae Make report better readable 2016-04-19 12:04:08 +02:00
mboelen
36b7d1bcdd Added new profile option: quick 2016-04-19 12:03:48 +02:00
mboelen
461bb84b62 Use correct TEMP_FILE variable 2016-04-19 10:34:04 +02:00
mboelen
41589b14c2 Added missing ;; 2016-04-19 09:55:02 +02:00
mboelen
2c815129e4 Added details and changed suggestion text 2016-04-19 09:54:18 +02:00
mboelen
722703da31 Extended ReportDetails function 2016-04-19 09:53:30 +02:00
mboelen
bebf3d0bd5 Use semicolon instead of comma 2016-04-19 07:38:24 +02:00
mboelen
1205511c9d Change of variables for IDS/IPS and layout changes 2016-04-15 20:07:20 +02:00
mboelen
e86f0522bf [TOOL-5102] Imported Fail2ban support and minor improvements 2016-04-15 14:51:53 +02:00
Eric Light
9c2229483f Replaced call to iptables with $IPTABLESBINARY (#167) 
* Replaced call to iptables with $IPTABLESBINARY

* Check for iptables before checking Fail2Ban chain
 2016-04-15 14:18:11 +02:00
mboelen
e86c68e3c5 Using question mark better defines the status then NA for most users 2016-04-13 21:49:43 +02:00
mboelen
d4a5aba7ea [FILE-7524] Support for multiple profiles 2016-04-13 19:50:15 +02:00
mboelen
015287e963 [CRYP-7902] Added support for multiple profiles 2016-04-13 19:49:30 +02:00
mboelen
f4a1ee8ac2 [NETW-3014] Test whitelisted interface in enabled profiles 2016-04-13 17:08:58 +02:00
mboelen
9a0102384f [KRNL-6000] Change test to allow parsing multiple profiles and storing more details 2016-04-13 16:13:04 +02:00
mboelen
fdd20a324e Added plugindir argument of show command 2016-04-13 16:12:22 +02:00
mboelen
c5de5e6a1b Added ReportDetails to store values of atomic tests 2016-04-13 16:11:46 +02:00
mboelen
13f1373944 Add --plugindir as alias to --plugin-dir 2016-04-13 12:08:31 +02:00
mboelen
28bc866686 Only set new plugin directory if not set before 2016-04-13 12:07:46 +02:00
mboelen
37a2614f79 Allow plugin directory to be configured, and apply new style configuration matching 2016-04-13 11:49:11 +02:00
mboelen
991083c13f Added new function ContainsString to search for the needle in the haystack 2016-04-13 11:48:02 +02:00
mboelen
0288c6df34 Enhanced error handling during license check 2016-04-13 09:09:52 +02:00
Eric Light
3b3a852122 Added tooling tests for Fail2Ban (#162) 
* Added binary for Fail2Ban

* Added test for Fail2Ban (presence and configuration)

* Added test to check for enabled Fail2Ban jails

* Added test to confirm at least one enabled jail. Fixed regex.

* Added check to confirm iptables has a fail2ban chain
 2016-04-13 08:12:26 +02:00
mboelen
59bbacd59b Added more details to show command 2016-04-12 21:59:23 +02:00
mboelen
8a35eed518 Show message on screen when data was uploaded 2016-04-12 21:58:19 +02:00
mboelen
af13d322b9 Updated colors 2016-04-12 21:58:01 +02:00
mboelen
c0228b8e48 Show release date 2016-04-11 07:57:29 +02:00
Kamil Boratyński
2465556567 features/testcases (#161) 
* Implemented equal test case.

* Implemented not-equal test case.

* Implemented greater-than test case.

* Implemented greater-or-equal test case.

* Implemented less-than test case.

* Implemented less-or-eqal test case.

Added some improvements and unifications.

* Added more unifications.

* Added more logs.

* Unified not-equal test.
 2016-04-10 16:32:21 +02:00
mboelen
066f562365 Allow parsing of multiple profiles 2016-04-07 16:25:11 +02:00
mboelen
810c37287f Support for show helper utility 2016-04-07 16:24:38 +02:00
mboelen
78167f37f2 Clean up of old variables 2016-04-05 11:31:21 +02:00
mboelen
b954eeceec Optimized code and solve double proxy statement to upload command 2016-04-05 10:02:32 +02:00
mboelen
95944c0035 Generic improvements for debug status, and cleaning up code 2016-04-02 18:28:53 +02:00
mboelen
cab2b9071c Adding --debug to Display function 2016-04-02 18:28:02 +02:00
mboelen
40d11eb37b Added variables related to database status 2016-04-02 18:27:32 +02:00
mboelen
4e58267658 [DBS-1860] Changes to test to make it more optimized 2016-04-02 17:18:49 +02:00
mboelen
17c435801d Added return values to IsRunning function 2016-04-02 17:18:19 +02:00
Andres Gomez Casanova
1b9920fde9 Checks if DB2 LUW is running on a server 
The check if performing by doing a grep on db2sysc, the DB2 instance process.
 2016-04-01 17:38:20 -05:00
mboelen
1426ff16f9 Removed old Display function parameter --text 2016-03-30 14:35:16 +02:00
Michael Boelen
079efdada1 Merge pull request #138 from rhyven/patch-1 
Hide fail2ban open+deleted file warning, when grsec is installed
 2016-03-30 14:34:36 +02:00
Michael Boelen
420b72ae20 Merge pull request #140 from kboratynski/features/macosx_php 
Added OSX default php.ini location.
 2016-03-30 14:33:54 +02:00
Michael Boelen
570639599b Merge pull request #137 from technimad/technimad-patch-1-PHPiniEl6fix 
Added ini dir of EL6
 2016-03-30 14:33:27 +02:00
mboelen
70bb10328f Use echo when checking parameters to prevent incorrect issues with screen output 2016-03-30 14:26:01 +02:00
mboelen
4d52e64b2a Match sshd process running and/or port 22 listening 2016-03-30 13:48:18 +02:00
mboelen
251b861df5 Changed function name to better reflect goal and UDP support 2016-03-30 13:45:34 +02:00
mboelen
3ad0bc9582 Renamed function to IsPortListening 2016-03-30 12:18:11 +02:00
Michael Boelen
beb02e2c3d Merge pull request #142 from kboratynski/features/sshd 
features/sshd
 2016-03-30 11:55:58 +02:00
cnrat
fcaa7ffe8b Bug fixed 
echo /etc/fstab is wrong.
 2016-03-29 16:35:39 +08:00
mboelen
0e9b63a6ed Adjusted variable to properly check systemd directory 2016-03-24 17:28:53 +01:00
mboelen
0779005b46 [AUTH-9308] Skip testing some files when systemd is used 2016-03-24 17:16:14 +01:00
mboelen
d7c8233dd4 Check for systemd 2016-03-24 17:15:39 +01:00
mboelen
0d2be381f9 [AUTH-9308] Test systemd targets 2016-03-24 16:46:54 +01:00
mboelen
95df056ca8 Don't use type -p, as it won't work on all systems 2016-03-24 14:35:12 +01:00
mboelen
45f6bcc601 Minor text changes 2016-03-24 11:11:40 +01:00
Michael Boelen
d1bb7855df Merge pull request #139 from rhyven/patch-2 
AUTH-9262 - restructure + pwquality
 2016-03-24 10:52:20 +01:00
Michael Boelen
30dae85a63 Merge pull request #141 from kboratynski/features/macosx_brew 
Added brew as package manager.
 2016-03-24 10:48:03 +01:00
mboelen
a3084da623 Improved templates and examples 2016-03-24 10:34:16 +01:00
Kamil Boratyński
1f320f68c2 Fixed IsTcpUdpListening function 2016-03-22 23:57:09 +01:00
Kamil Boratyński
232419df8c Modified SSH service checking. 2016-03-22 23:54:38 +01:00
Kamil Boratyński
3e5555fb12 Added listening function. 
Listening functions checks whether there exist a service listening
on specified protocol and port.
 2016-03-22 23:53:58 +01:00
Kamil Boratyński
85236bb996 Added brew as package manager. 2016-03-22 23:06:10 +01:00
Kamil Boratyński
89cb26c1f1 Added OSX default php.ini location. 2016-03-22 22:21:55 +01:00
Eric Light
fad4dfc0cc Modified AUTH-9262 
Added pwquality (default in some Ubuntu variants) to accepted password-quality modules.  Reworked test so that full points are possible (passwdqc and cracklib incompatible).
 2016-03-22 16:30:47 +13:00
Eric Light
2a2c094825 Hide fail2ban open+deleted file warning with grsec 
One of the features in grsecurity also prevents Fail2Ban from creating a temp file under /var/tmp.  I've been unable to pinpoint the line in fail2ban which causes the issue, but have confirmed it's related to Fail2Ban.

Note: disabling the PaX MPROTECT function on /usr/bin/python will also resolve this issue, but it's better to keep MPROTECT on.
 2016-03-22 15:28:21 +13:00
Erwin Vrolijk
7c2b8b90d9 Added ini dir of EL6 
On my EL6 systems PHP uses an ini directory of /etc/php.d, added this to the php test.
 2016-03-21 11:20:30 +01:00
mboelen
c3d5dabb49 Move stderr redirection to sysctl command instead of grep, to prevent errors displaying on screen 2016-03-17 21:02:28 +01:00
mboelen
e949e560d7 Improve systemd detection on Fedora 2016-03-17 20:57:31 +01:00
mboelen
b9dba2f3be Don't show umask exception, as it will trigger on Debian 8 2016-03-17 20:54:28 +01:00
mboelen
a427eb6fa7 Rewrote test to determine system manager 2016-03-17 20:32:21 +01:00
mboelen
abbcd2f97e Added additional logging for KRNL-5830 2016-03-17 19:39:36 +01:00
mboelen
39f24a57b9 Add Gentoo as Linux version 2016-03-17 18:11:03 +01:00
mboelen
9689417aec Add missing fi 2016-03-17 16:43:33 +01:00
mboelen
a33b3c828f Check system manager and allow init as option in /proc/1/cmdline 2016-03-17 16:40:53 +01:00
mboelen
7adf2425a6 Added STRG-1842 to check for authorized USB devices 2016-03-17 16:36:52 +01:00
mboelen
237c0f87a7 BOOT-5104: Rewrote test to detect service manager 2016-03-16 12:10:10 +01:00
mboelen
488c08c3f3 Add better description of hardening points assignment 2016-03-16 11:19:17 +01:00
Michael Boelen
2fe5fa2cc6 Merge pull request #135 from rhyven/patch-5 
Accept apt-get as a package audit tool
 2016-03-16 11:02:35 +01:00
Michael Boelen
a629248048 Merge pull request #134 from rhyven/patch-4 
Make AddHP identify non-optimal HP in logfile entries
 2016-03-16 11:02:15 +01:00
mboelen
322c7354d9 Added alternative location for dmidecode 2016-03-16 10:54:49 +01:00
mboelen
bdc0f010c1 Set fixed dmidecode location 2016-03-16 09:54:54 +01:00
Eric Light
a97bcb2142 Accept apt-get as a package audit tool 2016-03-14 12:02:18 +13:00
Eric Light
2ff7ce26c9 Make AddHP identify non-optimal HP in logfile entries 2016-03-14 10:35:57 +13:00
mboelen
b8df6c4204 DBS-1816: Removed suggestion 2016-03-13 16:49:08 +01:00
mboelen
8cc47819b4 Removed copyright line, added description 2016-03-13 16:03:46 +01:00
mboelen
6197ac08e7 Added link to website, blog, github 2016-03-13 16:00:39 +01:00
mboelen
dcb7f311fa Changed text and links 2016-03-13 15:48:03 +01:00
mboelen
cf553b543c Added missing } 2016-03-12 20:50:28 +01:00
mboelen
89fbdd2feb HTTP-6622: Determine Apache version and store in report 2016-03-12 20:45:37 +01:00
mboelen
6d2770ede6 Added FreeBSD path for namedb configuration file 2016-03-12 20:19:12 +01:00
mboelen
e88f15fd82 Removed tabs 2016-03-12 19:08:53 +01:00
mboelen
bd833057e1 NAME-4406: adjusted filter for localhost detection + logging 2016-03-12 19:08:23 +01:00
mboelen
7f34f9dece AUTH-9288: ignore add include/tests_authentication 2016-03-08 12:01:11 +01:00
mboelen
6ec3e5b39d Added suggestion for file systems which are symlinked 2016-03-08 11:35:15 +01:00
mboelen
4874c80186 HTTP-6624: ignore wildcard and default entries as ServerName 2016-03-08 11:34:33 +01:00
mboelen
ebdd946570 STRG-1840: disabled suggestion as this is considered high secure item 2016-03-08 09:50:28 +01:00
mboelen
62f31a8b82 SSH-7408: use only the last occurrence of a configured option 2016-03-08 08:47:25 +01:00
Michael Boelen
e9edd2dd09 Merge pull request #129 from rhyven/patch-3 
Make NAME-4404 case-insensitive
 2016-03-08 08:08:31 +01:00
Eric Light
e40a3562fb Make NAME-4404 case-insensitive 2016-03-07 15:15:22 +13:00
Eric Light
34c88e0c05 Removed errant semicolon which broke uploads 
Resolves below error:
   ./lynis: 25: ./include/data_upload: Syntax error: ";" unexpected
 2016-03-04 15:06:32 +13:00
mboelen
2b95019b62 Use proper variable for cURL 2016-03-03 12:50:43 +01:00
mboelen
09193d8ba9 Add support for FreeBSD to detect PAM files 2016-03-03 12:48:42 +01:00
mboelen
a67a8f89bc Added space when upload options are used 2016-03-03 10:20:23 +01:00
mboelen
54ab91f87e Renamed FINT-4351 to FINT-4338 2016-03-01 16:30:48 +01:00
Toni de la Fuente
617ede8686 Update tests_file_integrity 2016-02-29 17:27:07 -05:00
Toni de la Fuente
cb73eed69b added support to osquery 2016-02-29 17:16:50 -05:00
mboelen
13cfbd3019 Make IPv6 check compatible for all systems 2016-02-25 14:24:50 +01:00
mboelen
f6c84785e7 Changed exception of missing eth0 interface into an informational message 2016-02-24 19:59:23 +01:00
mboelen
75ca02d1a5 Allow proxy usage during license check 2016-02-15 13:50:03 +01:00
mboelen
2aa9b9a9b1 Changed custom URLs for hardening tips 2016-02-15 12:39:06 +01:00
Eric Light
4f38eb4739 Removed ServerAliveInterval 
Belongs in ssh_config instead.  Ref issue #120
 2016-02-10 09:24:19 +13:00
mboelen
c4888fbb8e Added value for ServerAliveInterval setting 2016-02-09 15:53:11 +01:00
mboelen
b1f655ca1e Merge branch 'master' of https://github.com/CISOfy/Lynis 2016-02-09 13:02:50 +01:00
Michael Boelen
fde45eafd4 Merge pull request #113 from pyllyukko/fix_LogText 
Fix "/etc/inittab" -> "/etc/sysconfig/init"
 2016-02-09 13:03:08 +01:00
mboelen
820c24c347 Added OpenBSD for [NETW-3004] 2016-02-09 13:00:29 +01:00
Michael Boelen
44752440e8 Merge pull request #115 from alobodzinski/master 
Change text and add account test for OpenBSD
 2016-02-09 12:59:10 +01:00
mboelen
a3b4705508 Reordered SSH options, added ServerAliveInterval, changed TCPKeepAlive suggestion 2016-02-09 12:54:47 +01:00
mboelen
66d8ea418f Improve log file for data uploads 2016-02-02 17:08:53 +01:00
mboelen
4923ce9cb4 Added comment 2016-02-02 17:07:44 +01:00
mboelen
ac5c98d76c Show what profile is used when using --config 2016-02-02 17:07:20 +01:00
mboelen
647b482c53 Use the right columns from DNF to split package name and version 2016-01-25 15:47:24 +01:00
mboelen
d3e58a0537 Adjusted stderr redirecting and improve logging of packages 2016-01-25 15:38:46 +01:00
mboelen
5c53d16189 Show on screen if vulnerable packages are found 2016-01-25 15:04:46 +01:00
mboelen
acafb316d3 Add warning if DNF found vulnerable packages 2016-01-25 13:57:31 +01:00
mboelen
3999be2300 Avoid errors on screen if sysctl keys are not readable 2016-01-25 13:54:09 +01:00
mboelen
727ff26283 Show on screen that DNF is being used 2016-01-25 13:52:58 +01:00
mboelen
e3c88fe766 Additional DNF tests 2016-01-25 13:43:05 +01:00
mboelen
1e12852b12 Initial support for DNF package manager 2016-01-25 13:18:59 +01:00
Alexander Lobodzinski
6309588246 [ACCT-2760]: Check availability OpenBSD accounting data 2016-01-22 11:52:34 +01:00
Alexander Lobodzinski
089f7013c1 [PRNT-2302]: Description text was obviously wrong 2016-01-22 11:23:49 +01:00
pyllyukko
71aa47cbf4
Fix "/etc/inittab" -> "/etc/sysconfig/init" 2016-01-16 21:14:38 +02:00
mboelen
6bab259a5e [AUTH-9234] Gather users on AIX, and rewriting of tests 2016-01-11 01:31:08 +01:00
mboelen
5e5507a1cd Use CreateTempFile for temporary file creation 2016-01-11 01:30:06 +01:00
mboelen
e0e56f2cdc Use CreateTempFile for creation of temporary files 2016-01-11 01:04:38 +01:00
mboelen
1cb90916ee Added functions and variables for creation of temporary files 2016-01-11 01:04:04 +01:00
mboelen
d5867762c6 Use CreateTempFile function for temporary files 2016-01-11 00:24:00 +01:00
mboelen
f313b2edf8 Allow defining a proxy for data uploads 2016-01-07 12:57:24 +01:00
mboelen
4736ad87b9 Replacement of functions and adding newlines 2016-01-07 12:56:46 +01:00
asiebelt
a095ba64a0 Fix scoring logic for "<" 2016-01-02 18:13:07 +01:00
asiebelt
7f462d0a41 Fix typo 2016-01-02 18:07:02 +01:00
asiebelt
81bac124ee Fix Scoring for "<" 2016-01-02 18:03:11 +01:00
asiebelt
99fd20aae0 Fix Test Definition 2016-01-02 17:49:01 +01:00
asiebelt
4234a646ed Update tests_ssh 2016-01-02 17:39:25 +01:00
mboelen
d167fe2782 Added test NETW-2600 to collect IPv6 configuration 2016-01-01 21:38:47 +01:00
mboelen
0116dac1d2 Add more aliases to --dumpoptions 2016-01-01 15:44:32 +01:00
mboelen
70c90bc8fa Added new function TestValue 2016-01-01 14:56:09 +01:00
mboelen
5b25317767 New tests and renumbering 2015-12-30 14:33:50 +01:00
mboelen
6b3c32b61f Added NETW-3032 to test for ARP monitoring software like arpwatch 2015-12-29 16:30:31 +01:00
mboelen
31b5c0bb42 Merged changes for ARPwatch 2015-12-29 16:28:18 +01:00
Michael Boelen
142fc100c4 Merge pull request #108 from alobodzinski/dovecot 
MAIL-8838: dovecot does not have postfix as a prerequisite
 2015-12-29 16:23:01 +01:00
mboelen
72b0f65438 [LOGG-2154] Check for remote syslogging, more in-depth testing 2015-12-22 16:56:15 +01:00
mboelen
95832c61d1 Update to reflect renamed functions logtext and report 2015-12-22 16:02:32 +01:00
mboelen
ae6ca56581 Show warning for writable configuration file 2015-12-22 16:01:30 +01:00
mboelen
6520400ca4 [AUTH-9288] New test to determine expired passwords 2015-12-22 16:00:51 +01:00
mboelen
d16b38eff8 Rename of logtext and report functions, upcoming year change 2015-12-21 21:17:15 +01:00
mboelen
83a44827e0 Define queryformat for rpm command 2015-12-21 19:20:34 +01:00
mboelen
ddfd21b696 Added test for gzip to allow compression of report file 2015-12-21 19:13:50 +01:00
mboelen
360e6b66f6 Split name and version information for RPM based package manager 2015-12-21 19:10:22 +01:00
mboelen
6815c9a915 Redirect errors from postconf output 2015-12-21 17:07:31 +01:00
mboelen
9451e633da [AUTH-9308] Test for respawn option on SUSE-based systems 2015-12-21 15:17:25 +01:00
mboelen
c12a4403aa Preparations for compressed uploads 2015-12-21 15:15:51 +01:00
mboelen
040c2efc1c Perform compressed uploads by default 2015-12-21 12:08:47 +01:00
mboelen
ad87a83bbc Add upload_compressed option to profile 2015-12-21 11:37:16 +01:00
mboelen
4b9b8a0bc7 New option for compressed uploads 2015-12-21 11:35:38 +01:00
mboelen
a59731405f Comment out unused function RealFilename 2015-12-21 11:26:00 +01:00
mboelen
526c519300 Retrieve cURL version number 2015-12-21 11:25:38 +01:00
mboelen
c68771a57a Ensure that readlink only is used when it is available 2015-12-21 10:03:51 +01:00
mboelen
7cf247bf21 Added VMware detection for ESXi 2015-12-16 13:40:28 +01:00
Alexander Lobodzinski
fccf889936 dovecot does not have postfix as a prerequisite 
fixed some spelling
 2015-12-14 16:14:38 +01:00
Michael Boelen
c96e9f079e Merge pull request #83 from alobodzinski/auth-openbsd 
Authentication fixes for OpenBSD
 2015-12-09 22:51:00 +01:00
Michael Boelen
502f106f9a Merge pull request #96 from kboratynski/issue_11-str_1840 
Authorization check for storage devices. Approved.
 2015-12-09 22:49:23 +01:00
Michael Boelen
494ba68a6b Merge pull request #105 from kboratynski/features/ssh_refactor 
Implementation of several SSH related configuration items.
 2015-12-08 18:49:58 +01:00
mboelen
2be968eb2c Add new test BOOT-5106 to check for boot.efi on Mac OS X 2015-12-08 18:41:43 +01:00
Kamil Boratyński
8c544846ab Improved [SSH-7408] with 'AllowTcpForwarding'. 2015-12-07 07:15:48 +01:00
Kamil Boratyński
785119824e Improved [SSH-7408] with 'PermitTunnel'. 2015-12-07 07:15:03 +01:00
Kamil Boratyński
490fd6d5ec Improved [SSH-7408] with 'GatewayPorts'. 2015-12-07 07:14:19 +01:00
Kamil Boratyński
3817ffd299 Improved [SSH-7408] with 'PermitUserEnvironment'. 2015-12-06 01:46:47 +01:00
Kamil Boratyński
5487401aba Improved [SSH-7408] with 'MaxSessions'. 2015-12-06 01:46:47 +01:00
Kamil Boratyński
47576a1bd0 Improved [SSH-7408] with 'MaxStartups'. 2015-12-06 01:46:35 +01:00
Kamil Boratyński
35b663cff9 Improved [SSH-7408] with 'LoginGraceTime'. 2015-12-06 01:45:31 +01:00
Kamil Boratyński
96dfb5cf15 Improved [SSH-7408] with 'Port'. 2015-12-06 01:41:23 +01:00
Kamil Boratyński
c394024769 [SSH-7408]: Implemented '!' test type. 2015-12-05 21:46:03 +01:00
Kamil Boratyński
d191bed2d7 Improved [SSH-7408] with 'ClientAliveInterval'. 2015-12-05 21:37:27 +01:00
Kamil Boratyński
7bcf442a1e Improved [SSH-7408] with 'ClientAliveCountMax'. 2015-12-05 21:36:13 +01:00
Kamil Boratyński
c252b9b376 Improved [SSH-7408] with 'MaxAuthTries'. 2015-12-05 21:18:35 +01:00
Kamil Boratyński
2e37c17675 [SSH-7408]: Implemented '>' test type. 2015-12-05 21:18:35 +01:00
Kamil Boratyński
9a30640327 [SSH-7408]: Implemented '<' test type. 2015-12-05 21:18:32 +01:00
Kamil Boratyński
013886ec16 Refactorized [SSH-7408]. 
First step for differents types of tests.
 2015-12-05 20:39:30 +01:00
Alexander Lobodzinski
199483bd1e Remote syslog server not detected for syslog-ng 2015-12-04 15:43:20 +01:00
mboelen
3e94c4a8f0 Added ssh_host_ed25519_key and ssh_host_ed25519_key.pub as sources to create Host ID 2015-12-04 14:25:24 +01:00
Michael Boelen
e227b42eaf Merge pull request #84 from laurentquillerou/master 
Added firewire-core module detection and improvement to egrep statement
 2015-12-04 14:21:57 +01:00
mboelen
386d7701f3 New SSH options added and small changes to improve output on screen and in log file 2015-12-04 11:05:13 +01:00
Kamil Boratyński
9421feb704 Improved [SSH-7408] with 'Compression'. 2015-12-04 09:29:54 +01:00
Kamil Boratyński
201a6728b8 Improved [SSH-7408] with 'TCPKeepAlive'. 2015-12-04 02:30:28 +01:00
Kamil Boratyński
11c6b06c91 Improved [SSH-7408] with 'FingerprintHash'. 2015-12-04 02:29:18 +01:00
mboelen
7d0f5acc54 No warnings for SSH configuration, instead only use suggestions. Plus logging of details. 2015-12-03 12:15:49 +01:00
mboelen
e75569babf If a suggestion has specific details, show it on screen 2015-12-03 12:14:39 +01:00
Kamil Boratyński
10b9edd8ef Improved [SSH-7408] with 'PrintLastLog'. 2015-12-03 02:37:56 +01:00
Kamil Boratyński
42a5df3796 Improved [SSH-7408] with 'X11Forwarding'. 2015-12-03 02:29:57 +01:00
Kamil Boratyński
cd3cd74b8e Improved [SSH-7408] with 'UseDNS'. 2015-12-03 02:29:57 +01:00
Kamil Boratyński
e656111c75 Improved [SSH-7408] with 'IgnoreRhosts'. 2015-12-03 02:29:57 +01:00
Kamil Boratyński
37ab68d501 Improved [SSH-7408] with 'PermitEmptyPasswords'. 
[SSH-7408] will verify 'PermitEmptyPasswords' option too.
 2015-12-03 02:29:57 +01:00
Kamil Boratyński
66b0ee3977 Moved [SSH-7416] into [SSH-7408]. 2015-12-03 02:29:56 +01:00
Kamil Boratyński
a07c7ae4f9 Moved [SSH-7412] into [SSH-7408]. 2015-12-03 02:29:56 +01:00
Kamil Boratyński
dcd8f89256 Moved [SSH-7414] into [SSH-7408]. 2015-12-03 02:29:56 +01:00
Kamil Boratyński
f28fd77583 Modified [SSH-7408] -- made it widely usable. 
Modified [SSH-7408] in such a way that every option for SSH server might
be added in SSHOPS with expected (and wrong) values
(like it was described in comment).
 2015-12-03 02:29:54 +01:00
Michael Boelen
9ca47fd220 Merge pull request #86 from RebuiltBits/master 
Add Python version 2/3 detection and report it
 2015-12-02 18:06:33 +01:00
mboelen
d73e79193a Test for longer status string 2015-12-02 17:50:35 +01:00
mboelen
2b101e75e8 Audit status of application firewall and added test for Mac OS X (FIRE-4532) 2015-12-02 17:37:58 +01:00
mboelen
4ab96e4f39 Improved test FIRE-4512 so that it also triggers if no more than 10 rules are found 2015-12-02 16:55:41 +01:00
mboelen
54e7f62d9a Enhancements to retrieve file permissions and related logging 2015-12-01 12:38:40 +01:00
Kamil Boratyński
c1c0d722d0 Implemented ISSUE: #11 
Test [STRG-1840] checks authorization.
 2015-12-01 01:18:46 +01:00
mboelen
c79a1ea3a4 Show error on screen if license server can not be contacted 2015-11-22 20:43:06 +01:00
mboelen
c3054de0fe Added details to logging if upload fails 2015-11-22 19:35:34 +01:00
mboelen
391f67e7c2 Show warning if any error happened during license check 2015-11-22 19:25:32 +01:00
mboelen
ce0955d05c Show warning when upload was not succesful 2015-11-22 19:05:25 +01:00
mboelen
756c09cb4a Added YUM details 2015-11-18 15:57:33 +01:00
mboelen
c68b70ff2e Extended YUM test for security plugin testing 2015-11-18 15:55:49 +01:00
Jason Novinger
e5cc018ad1 Add python2/3 detection and report version 
Add support for checking generic Python, Python 2.x, and Python 3.x with
version reporting.
 2015-11-07 18:16:23 -06:00
mboelen
510de19ce9 NETW-3004 now collects interfaces from most common operating systems 2015-10-27 13:33:16 +01:00
mboelen
7b3299fcb9 Changes to AUTH-9286 to check for minimum age as well 2015-10-27 12:42:41 +01:00
Laurent Quillerou
18eef30c12 Added firewire-core module detection 2015-10-25 18:00:58 +02:00
mboelen
a98f377f4d Test for blacklisted host ID values 2015-10-23 13:42:23 +02:00
mboelen
d058ba8bfc Added password history tests to PAM plugin 2015-10-22 15:55:14 +02:00
mboelen
ebc7cb113e Create a host ID by using SSH keys, when possible 2015-10-22 15:54:51 +02:00
mboelen
69cbabfed2 Log when vulnerable packages are found 2015-10-21 21:45:53 +02:00
Alexander Lobodzinski
250d5b3e0c ypldap on OpenBSD 2015-10-16 11:52:25 +02:00
Alexander Lobodzinski
34eb749636 Authentication fixes for OpenBSD 2015-10-16 11:24:23 +02:00
mboelen
a5583da5c3 Adding correct variables for proper logging and testing 2015-10-15 15:57:27 +02:00
mboelen
9d1cec8a9b Changes to check for presence BusyBox, to better support platforms using this as primary shell 2015-10-14 16:49:57 +02:00
Michael Boelen
776a70d6cf Merge pull request #82 from SiemKorteweg/master 
Optimized use of cat, grep and awk.
 2015-10-14 10:55:33 +02:00
mboelen
6bea4e0334 Use POSIX compatible flag, so it also works on BusyBox 2015-10-14 10:28:27 +02:00
mboelen
b1437a05ef For exceptions the lynis.log file is a better source 2015-10-14 10:27:37 +02:00
SiemKorteweg
0c48fc3880 Optimized use of cat, grep and awk. 
Detection of duplicate entries in /etc/hosts is now more robust.
On CentOS7 the SERVICE_MANAGER is detected correctly.
 2015-10-10 13:25:14 +02:00
Michael Boelen
c0378f38f5 Merge pull request #80 from SiemKorteweg/master 
Combine "sort | uniq" to "sort -u" and sorting data first before making it unique.
 2015-10-08 22:46:21 +02:00
mboelen
a99a3d348e Added audit daemon and PAM variables 2015-10-08 16:25:35 +02:00
mboelen
fb1cf9e547 Rename PCI-DSS to PCI DSS 2015-10-08 16:25:09 +02:00
SiemKorteweg
b7d24c3413 Make sure that the input of "uniq -d" is sorted to avoid that duplicate UID's and hosts entries are missed. 2015-10-06 20:02:33 +02:00
SiemKorteweg
bf1da50c14 Combine "sort | uniq" into "sort -u" to reduce the number of processes used for running Lynis. The busybox version of sort also supports the -u option. 2015-10-04 17:59:28 +02:00
mboelen
009a363550 Properly show compliance status now 2015-10-01 22:40:49 +02:00
mboelen
ac87ce4c79 Added DisplayManual function, friendly name for compliance, minor enhancements 2015-10-01 22:40:29 +02:00
mboelen
3f8b826585 Renaming of variables for clarity 2015-10-01 22:39:01 +02:00
mboelen
385e62b6a5 Compliance variables 2015-10-01 22:38:29 +02:00
mboelen
d6a8a3c425 Correct testing for disabled/blacklisted USB storage driver 2015-10-01 19:56:39 +02:00
mboelen
a6ac097a93 Redirect possible errors instead of display on screen 2015-10-01 16:06:27 +02:00
mboelen
85f6c555b2 Minor cleanup and redirecting possible errors 2015-10-01 16:02:09 +02:00
mboelen
2b5c63bff9 Added ShowComplianceFinding function to display any non-compliance with security standards 2015-10-01 13:16:27 +02:00
mboelen
55ee1e90bc Check correct variable for enabled compliance standards 2015-10-01 12:59:15 +02:00
mboelen
9505a10dd7 Add profile setting compliance_standards to define which ones are enabled 2015-10-01 11:59:50 +02:00
mboelen
4c0fa90478 Added variables for compliance standards like HIPAA, ISO27001/ISO27002 and PCI-DSS 2015-10-01 11:58:34 +02:00
mboelen
c9c78f751d Added plugin phase variable and specific PAM settings 2015-10-01 11:49:30 +02:00
mboelen
fee1961eed Added DigitsOnly function to extract only numbers from a text string 2015-09-30 18:34:16 +02:00
mboelen
cf11b95c3f Added detection of ESET products and logging of malware scanner to report 2015-09-28 11:00:34 +02:00
mboelen
adb5948b30 Properly parse updated way of storing warnings and suggestions 2015-09-24 21:42:21 +02:00
mboelen
cc4feee4e5 New way of reporting a warning 2015-09-24 21:41:48 +02:00
mboelen
784224f4e7 Uniform way of saving warnings and suggestions to the log for later parsing 2015-09-24 21:40:54 +02:00
mboelen
5dfb031e4d Removed bracket 2015-09-24 21:26:55 +02:00
mboelen
1edaba4d71 Added new test [CONT-8108] to check file permissions of Docker files 2015-09-24 20:29:05 +02:00
mboelen
5fe1e6dd65 Corrected logging for tests related to /etc/newsyslog.conf parsing 2015-09-24 20:27:49 +02:00
mboelen
41e08807c9 Changed description of place holder 2015-09-24 20:27:17 +02:00
mboelen
8b5b8b4a01 Added new parameters to ReportSuggestion and ReportWarning functions 2015-09-24 20:26:32 +02:00
mboelen
84821a4ed0 Removed [AUTH-9230] and merged it into [AUTH-9228] 2015-09-24 20:24:46 +02:00
mboelen
31363e9b39 Extended description for vulnerable package tests on FreeBSD 2015-09-24 20:14:59 +02:00
mboelen
2bcb519123 Changed test IDs of place holders 2015-09-24 20:13:05 +02:00
mboelen
9023f17662 Changed test IDs of place holders 2015-09-24 20:12:19 +02:00
mboelen
c17fcfd92d Corrected PKGS-7380 and undoubled PKGS-7381 2015-09-24 20:10:30 +02:00
mboelen
1b9b084c03 Changed lmd to maldet, as LMD detection 2015-09-24 17:45:11 +02:00
mboelen
4f5eedabfc Added the detection of LMD, or Linux Malware Detect tooling 2015-09-24 16:45:03 +02:00
Alexander Lobodzinski
d80bf2f437 Bugfix: wrong logtext for HRDN-7230 2015-09-22 12:00:44 +02:00
Alexander Lobodzinski
adc57330f6 Bugfix: nginx SSL detection worked on Linux only (only GNU sed understands \t on the command line) 2015-09-21 13:04:44 +02:00
Michael Boelen
14a79d8a63 Merge pull request #78 from rsmith-nl/freebsd-services 
Improvements for FreeBSD services
 2015-09-16 23:35:54 +02:00
Roland Smith
f11783dbdf Merge branch 'master' into freebsd-services 2015-09-16 20:29:51 +02:00
mboelen
32226d145f Merged patch to properly log umask value 2015-09-16 17:03:13 +02:00
mboelen
91c9760598 Add hardening points properly to umask tests 2015-09-16 17:01:17 +02:00
mboelen
d786c687a1 Added variables which were not initialized before 2015-09-16 17:00:12 +02:00
Alexander Lobodzinski
37f9dcb8cc Bugfix for BSD: unrelated variable got logged instead of umask 2015-09-14 19:38:00 +02:00
mboelen
df5ff883da Merge branch 'master' of https://github.com/CISOfy/Lynis 2015-09-12 15:19:29 +02:00
mboelen
6fbe0e95c5 Changes to comments only 2015-09-12 15:19:21 +02:00
Alexander Lobodzinski
d2c0e7491e In quiet mode, hardening index was not written to log and report files 2015-09-11 14:54:38 +02:00
mboelen
78f32c2f28 Added screen output for /etc/login.conf 2015-09-10 21:46:23 +02:00
mboelen
7d0759297e Corrected case function 2015-09-10 21:42:30 +02:00
mboelen
21d305b689 Add support for testing umask value in /etc/login.conf like FreeBSD systems 2015-09-10 21:07:06 +02:00
mboelen
0b9c6132c6 Add test [SHLL-6230] to test for umask values in common shell configuration files 2015-09-10 21:06:40 +02:00
mboelen
fa98d9bba2 Import of tool tips section 2015-09-10 21:05:04 +02:00
mboelen
b43bf17954 Remove tool tips section from report 2015-09-10 21:04:18 +02:00
mboelen
28d9a49a5f Renamed BINPATHS to BIN_PATHS 2015-09-10 19:45:12 +02:00
mboelen
0db8eca467 Count total amount of suggestions and warnings 2015-09-10 09:18:20 +02:00
mboelen
7feb7e9a6c Show amount of suggestions and warnings 2015-09-10 09:18:03 +02:00
mboelen
b6c0736d6e Added counters for suggestions and warnings 2015-09-10 08:35:57 +02:00
mboelen
a8972b7b7f Changed exit codes when using incorrect parameters 2015-09-10 08:35:40 +02:00
mboelen
7f4ee7ba56 Added ExitCustom function and notes for virtualization 2015-09-10 08:35:09 +02:00
mboelen
090bb2d4eb Extended virtualization tests and logging 2015-09-09 20:24:48 +02:00
mboelen
5f2ef483f6 Improved tests and logging for automation tools 2015-09-08 16:02:41 +02:00
Michael Boelen
e1c2891db9 Merge pull request #74 from alobodzinski/tooling-cf3 
CFEngine 3 detection
 2015-09-08 15:08:49 +02:00
mboelen
174172eeba Simplify: clarify if a particular set of module is not available, instead of showing cross 2015-09-08 14:59:25 +02:00
mboelen
e9373b59b0 Cleanup: Don't show pflogd status on screen, when pf is not available 2015-09-08 14:49:42 +02:00
Alexander Lobodzinski
66ff2a9229 Fixed typos 2015-09-08 14:28:24 +02:00
Alexander Lobodzinski
2d72fe18d3 Detect automation with Cfengine 3 2015-09-08 14:19:11 +02:00
mboelen
1316fdf38b Changed identation for GRUB2 test 2015-09-07 21:13:12 +02:00
Michael Boelen
59390f1717 Merge pull request #73 from laurentquillerou/nginx-conf 
Include main nginx.conf file in parsing.
 2015-09-07 21:06:08 +02:00
Michael Boelen
48fd39c570 Merge pull request #71 from alobodzinski/openbsd-httpd 
merging pull request to skip httpd on OpenBSD systems.
 2015-09-07 20:58:55 +02:00
Laurent Quillerou
b83c3fbb10 Include main nginx.conf so that it generate nginx_config_option 2015-09-07 18:52:19 +03:00
mboelen
e50eef0c19 Added hint for possible extension to kernel scheduler 2015-09-07 17:43:00 +02:00
mboelen
d23ef2db0b Changed screen identation of GRUB2 test 2015-09-07 17:42:29 +02:00
mboelen
1283ccc061 Added new test for UEFI detection [BOOT-5116] and storing data in report 2015-09-07 17:41:05 +02:00
mboelen
919995eb5a Added UEFI_BOOTED_SECURE 2015-09-07 17:40:26 +02:00
mboelen
429fb62fd7 Added UEFI_BOOTED 2015-09-07 17:40:03 +02:00
Laurent Quillerou
3cdd9ea949 Delete trailing whitespace 2015-09-07 18:35:07 +03:00
Alexander Lobodzinski
f7ec431a65 /usr/sbin/httpd on OpenBSD is builtin non-Apache webserver, do not run with -v 
If Apache is installed it is detected in /usr/local/sbin/httpd nevertheless
 2015-09-07 17:31:18 +02:00
Michael Boelen
a90d225bf4 Merge pull request #68 from d4t4king/master 
include/tests_filesystems tweak
 2015-09-07 12:06:06 +02:00
mboelen
84baf688c8 Renumber test and search for explicit yes value, log status 2015-09-07 11:26:09 +02:00
Michael Boelen
f471bf9d96 Merge pull request #70 from kboratynski/auth-9407 
Wrote 'AUTH-9407' - logging failed login attempts.
 2015-09-07 11:19:40 +02:00
mboelen
5165e57b86 Added report option to store logging status of failed logins 2015-09-07 11:17:38 +02:00
mboelen
53840a4cfb Added variable for logging status of failed logins 2015-09-07 11:17:08 +02:00
mboelen
fc27379452 Minor cleaning up and improved comment 2015-09-07 10:13:20 +02:00
Kamil Boratyński
0e97f7936f Wrote 'AUTH-9407' - logging failed login attempts. 2015-09-07 04:12:58 +02:00
mboelen
a42e8feac2 Added Unbound status and configuration check, logging name cacher status to report file 2015-09-06 21:38:21 +02:00
mboelen
88caa85f59 Added default values for name cachers and Unbound status 2015-09-06 21:37:26 +02:00
mboelen
4a354c8479 Change ipfw to IPFW, change exeception ID for IPFW test 2015-09-06 17:42:56 +02:00
mboelen
10a300ddb7 Don't show pf status on screen when it is not available 2015-09-06 17:38:15 +02:00
Michael Boelen
8ab314cf07 Merge pull request #43 from rsmith-nl/ipfw 
Add test for 'ipfw' firewall on FreeBSD.
 2015-09-06 17:34:36 +02:00
mboelen
05dd1a6814 Remove systemctl to detect virtualization, use systemd-detect-virt instead 2015-09-05 18:51:36 +02:00
mboelen
461920ff72 Enabled dmidecode for virtualization detection 2015-09-05 18:41:04 +02:00
Michael Boelen
2fd7788b9b Merge pull request #58 from markruys/master 
More reliable and often faster check to determine virtualization.
 2015-09-05 17:34:18 +02:00
squid-cache-object
12d9b38288 Update tests_filesystems 2015-09-03 14:14:02 -07:00
Michael Boelen
3927d60b8e Merge pull request #69 from alobodzinski/name-4406-hostname-clash 
Do not let a hostname that is contained in "localhost" like "cal" tri…
 2015-09-03 17:35:25 +02:00
Alexander Lobodzinski
e1a87794bc Do not let a hostname that is contained in "localhost" like "cal" trigger a false positive 2015-09-03 17:20:34 +02:00
mboelen
d9b7d9a9fd Combined several potential mount option tests into 1 unit 2015-09-03 15:44:10 +02:00
mboelen
f4c2bd52fb Ensure that docker is a file, not directory in /usr/libexec 2015-09-03 15:43:33 +02:00
mboelen
235b228fe2 Added vmtoolsd detection 2015-09-03 11:15:55 +02:00
dataking
e37446521d include/tests_filesystems tweak 2015-09-01 11:50:07 -07:00
mboelen
2577caf66d Only show suggestion for ntpdate if ntpd isn't running 2015-09-01 17:40:05 +02:00
mboelen
d2aaa9662e Changed test description 2015-09-01 16:10:16 +02:00
mboelen
18d97ce60e Use different status for unused firewall rules 2015-09-01 15:50:14 +02:00
mboelen
8cefc0f7b9 Show different status on screen when expired SSL certificates were found 2015-09-01 15:49:50 +02:00
mboelen
d4b1812962 Changed screen output when finding old files in /tmp 2015-09-01 15:47:32 +02:00
mboelen
401bf26c91 NIS improvement for test 2015-09-01 13:37:55 +02:00
mboelen
7cb9e364c7 Proper filtering for IPv6 addresses 2015-08-31 13:23:17 +02:00
mboelen
d1ae757240 Replaced -z for empty string testing 2015-08-20 18:50:30 +02:00
Michael Boelen
afe30cf3a7 Merge pull request #56 from mpepping/master 
Comparison error when Docker is present, but the daemon is not running (or unset).
 2015-08-20 18:48:32 +02:00
mboelen
210ba41a3c Improved umask detection and logging 2015-08-20 18:46:06 +02:00
mboelen
649f0cfb3c Improved BOOT-5180 detection for newer systems like Debian 8 and screen output enhancement 2015-08-20 18:37:03 +02:00
mboelen
7bd91675fe Improved debug logging 2015-08-19 16:20:21 +02:00
mboelen
0c2a9daef9 Show help on screen 2015-08-19 16:19:14 +02:00
mboelen
8c1e1f29a3 Additional logging 2015-08-19 16:02:50 +02:00
mboelen
2e87b8fde9 Apply additional checks on first cURL command execution 2015-08-19 15:51:52 +02:00
mboelen
c153344240 Capture self-signed certificates during upload with cURL 2015-08-19 15:31:24 +02:00
Mark Ruys
919e48001d More reliable and often faster check to determine virtualization. 2015-07-27 12:38:13 +02:00
Martijn Pepping
25c8567b57 Fixed an comparison error when Docker is present, but the daemon is not running (or unset). 2015-07-24 23:58:50 +02:00
Mark Ruys
c998924b51 Fix STRG-1840 (Check for disabled USB storage) 2015-07-24 15:11:39 +02:00
mboelen
dd66273f41 Removed unused categories 2015-07-22 18:28:34 +02:00
mboelen
db131518f0 Clean up code 2015-07-22 17:37:39 +02:00
mboelen
afd01ece5d Remove incomplete tests, code enhancements 2015-07-22 17:37:11 +02:00
mboelen
66fb369593 Copyright line changes and cleanups 2015-07-22 16:28:11 +02:00
mboelen
17c44ced52 Include examples and clarify usage 2015-07-22 14:57:57 +02:00
mboelen
8f9a616854 Add more descriptive text to the template 2015-07-22 14:26:25 +02:00
mboelen
2b1061ef14 Added suggestions for Solaris auditing 2015-07-22 13:47:44 +02:00
mboelen
fd5c968d16 Cleaning up some lines 2015-07-22 13:44:30 +02:00
mboelen
afaecd9512 Removing deprecated strings and cleaning up 2015-07-22 12:21:36 +02:00
mboelen
95d08a735a Optimizing code, cleaning up 2015-07-22 12:20:27 +02:00
mboelen
e06d706c83 Optimizing code, cleaning up 2015-07-22 12:20:03 +02:00
mboelen
6857f01500 Added LDAP configuration file location to report, and code cleanups 2015-07-16 17:02:15 +02:00
James White
f341b01e4d Fix false positive matches with unsafe ports on SQD-3624 
The grep statement needs to be modified to prevent tagging port values that contains a value in `SQUID_DAEMON_UNSAFE_PORTS_LIST` but aren't actually the listed port.
 2015-07-15 11:50:56 +01:00
Michael Boelen
4266992f6b Merge pull request #39 from aneeshusa/check-locate-preqs 
Prevent the locate test from running spuriously when locate is not present.
 2015-07-14 00:55:47 +02:00
Michael Boelen
6694add635 Merge pull request #38 from aneeshusa/update-systemd-sulogin-detection 
Update check for sulogin under systemd.
 2015-07-14 00:49:40 +02:00
mboelen
e8111a124f Increase default minimum amount of connections before alerting 2015-07-14 00:31:59 +02:00
mboelen
7d30538311 Added missing bracket 2015-06-17 17:13:44 +02:00
mboelen
b947bb085c Changed detection, added examples of fstab entries 2015-06-17 17:06:51 +02:00
mboelen
f34e59663f Report hardening index, even when report is not shown 2015-06-11 20:50:19 +02:00
mboelen
f0026427bb Textual changes 2015-06-11 13:58:30 +02:00
mboelen
0d4b25d308 Disable suggestion for this test 2015-06-11 13:58:16 +02:00
mboelen
e13a9087ea Added compilers to report 2015-06-11 13:57:57 +02:00
mboelen
72feac9638 Added additional legal words for banner usage 2015-06-11 13:57:37 +02:00
mboelen
785ac74f91 Moved tests to new container group 2015-05-27 12:36:34 +02:00
mboelen
5f3c47df68 Added debsecan, debsums and kernel package counting 2015-05-27 12:35:56 +02:00
mboelen
7f0fbcf359 Initial import for container category 2015-05-27 12:34:01 +02:00
mboelen
f60011eb1b Removing tests which were already performed in authentication section. 2015-05-27 11:43:08 +02:00
mboelen
917c790ecc Changed text 2015-05-27 11:42:31 +02:00
mboelen
fe636c7d6c Docker support 2015-05-27 11:25:35 +02:00
mboelen
30b9b1edd9 Added support for Docker binary 2015-05-27 11:25:07 +02:00
mboelen
bb696a04f1 Improved detection of directories in logrotate 2015-05-26 11:13:47 +02:00
mboelen
c70f3e93cd Cleanup of screen output, with focus on minimum output 2015-05-26 11:13:23 +02:00
mboelen
a1095ef941 Improved swap detection and added UUID check 2015-05-26 11:12:36 +02:00
mboelen
3c3bb2d0db Do not show auditd suggestion for OpenVZ systems 2015-05-26 11:11:42 +02:00
mboelen
1a04109dad Extended descriptions 2015-05-26 11:11:15 +02:00
mboelen
52b8c3a6a7 Added VMTYPE 2015-05-26 11:10:50 +02:00
mboelen
b885b9f84f Add missing pipe 2015-05-25 23:20:52 +02:00
mboelen
1d1aa3c966 Improved kernel detection on Slackware 2015-05-25 23:17:42 +02:00
mboelen
2f0e9f0981 Changed last line 2015-05-25 23:17:21 +02:00
mboelen
ef2b12e218 Added block and character type devices as symlinks 2015-05-25 23:17:08 +02:00
mboelen
3f3ced806e Changed last line 2015-05-25 23:16:45 +02:00
mboelen
7854eeae20 Chronyd support, finishing test 2015-05-25 17:45:41 +02:00
mboelen
1c07e6fa2c New test TIME-3106, Chronyd and systemd-timesyncd support 2015-05-25 17:33:51 +02:00
mboelen
45114e6557 Chef support added 2015-05-25 17:20:58 +02:00
mboelen
f3bd9ca9ad Display only the tools actually found, to keep screen output as clean as possible 2015-05-17 23:22:54 +02:00
mboelen
46f9a3dec8 Log file integrity monitoring tool, adding support for lfd (CSF) tool 2015-05-17 23:01:38 +02:00
mboelen
283e198c23 Improved detection of blacklisted/disabled modules 2015-05-17 23:00:28 +02:00
mboelen
893e17d982 Added new AddSystemGroup function 2015-05-13 14:45:50 +02:00
mboelen
5729189349 Added additional legal words for banners 2015-05-13 14:45:16 +02:00
mboelen
c37e2eb9eb Extended Sophos detection 2015-05-04 13:37:36 +02:00
mboelen
22810e58e7 Replace existing update check options with new helper utility 2015-04-30 01:28:33 +02:00
mboelen
943b944a13 New profile options for automatic updates 2015-04-30 01:28:05 +02:00
mboelen
0e581e6ad7 Initial import of helper for automatic updates 2015-04-30 01:27:36 +02:00
mboelen
8ae3cfd5ad Remove unused variable 2015-04-30 01:25:18 +02:00
mboelen
1ece78f1a8 Set default for showing program details at start 2015-04-30 01:23:47 +02:00
mboelen
508cf7ac71 Added missing space 2015-04-29 19:58:13 +02:00
mboelen
6a0417da8b Added Python and updated PHP description 2015-04-29 14:20:46 +02:00
mboelen
70e20d514c Ensure that only one value is provided 2015-04-29 13:53:40 +02:00
mboelen
2cd57933b6 Correction of Display function 2015-04-29 11:57:57 +02:00
mboelen
aa8410477e Performance tuning by removing full listing of binaries from log 2015-04-29 11:57:30 +02:00
Roland Smith
1bb5b4b0a6 FreeBSD uses the bsdrc service manager. 
With this patch, a run on my machine returns:

    [+] Initializing program
    ------------------------------------
    - Detecting OS...  [ DONE ]

    ---------------------------------------------------
    Program version:           2.1.1
    Operating system:          FreeBSD
    Operating system name:     FreeBSD
    ...

    [+] Boot and services
    ------------------------------------
    - Service Manager [ bsdrc ]
 2015-04-27 20:09:18 +02:00
Roland Smith
db828b5e03 Used service(8) to discover running services. 
On all supported FreeBSD releases, the service(8) program can be used to
discover which services are running. This program has been added to the test
for binaries. If available, it will be used to test for services. If not, the
original code that parses /etc/rc.conf is used.

On my system, the following information is produced in the logfile:

    [19:51:22] Performing test ID BOOT-5165 (Check for FreeBSD boot services)
    [19:51:22] Searching for services at startup (service)
    [19:51:23] Found service (service/rc.conf): bgfsck
    [19:51:23] Found service (service/rc.conf): cleanvar
    [19:51:23] Found service (service/rc.conf): cron
    [19:51:23] Found service (service/rc.conf): cupsd
    [19:51:23] Found service (service/rc.conf): dbus
    [19:51:23] Found service (service/rc.conf): devd
    [19:51:23] Found service (service/rc.conf): dmesg
    [19:51:23] Found service (service/rc.conf): dnsmasq
    [19:51:23] Found service (service/rc.conf): gptboot
    [19:51:23] Found service (service/rc.conf): hostid
    [19:51:23] Found service (service/rc.conf): hostid_save
    [19:51:23] Found service (service/rc.conf): ip6addrctl
    [19:51:23] Found service (service/rc.conf): ipfw
    [19:51:23] Found service (service/rc.conf): mixer
    [19:51:23] Found service (service/rc.conf): motd
    [19:51:23] Found service (service/rc.conf): newsyslog
    [19:51:23] Found service (service/rc.conf): nginx
    [19:51:23] Found service (service/rc.conf): openntpd
    [19:51:23] Found service (service/rc.conf): postfix
    [19:51:23] Found service (service/rc.conf): powerd
    [19:51:23] Found service (service/rc.conf): sendmail
    [19:51:23] Found service (service/rc.conf): smartd
    [19:51:23] Found service (service/rc.conf): syslogd
    [19:51:23] Found service (service/rc.conf): virecover
    [19:51:23] Found 24 services/options to run at startup

The report shows:

    [+] Boot and services
    ------------------------------------
    - Service Manager [ UNKNOWN ]
    - Checking presence FreeBSD loader [ FOUND ]
    - Checking services at startup (service/rc.conf) [ DONE ]
    Result: found 24 services/options set
 2015-04-27 19:58:07 +02:00
Roland Smith
4d94227a08 Find FreeBSD service binary. 2015-04-27 19:33:11 +02:00
Roland Smith
a0b20fcfe3 Wrap ipfw test in SKIPTEST block. 2015-04-27 18:26:39 +02:00
Roland Smith
ded7e95a14 Check if ipfw is enabled in rc.conf. 2015-04-27 18:24:18 +02:00
Roland Smith
5d7dc80481 Initial version of IPFW test (FreeBSD). 2015-04-27 18:24:11 +02:00
Aneesh Agrawal
bfd24585cf Pass information about locate prereqs to Register. 
Prevent the locate test from running spuriously when locate is not
present
 2015-04-27 03:31:43 -04:00
Aneesh Agrawal
d282fbfc9c Update check for sulogin under systemd. 
The default rescue.service unit file was updated
in the systemd repo on Jan 23, 2015
to allow for sulogin location variability.
 2015-04-27 03:13:42 -04:00
mboelen
474d69dfd6 Added /usr/lib64/apache2 as search path 2015-04-24 13:31:49 +02:00
mboelen
cd78379906 Extended screen output when upload fails 2015-04-22 11:02:22 +02:00
mboelen
ec5e9cbecf Extending ShowSymlinkPath function to account for missing -f option 2015-04-22 00:57:58 +02:00
mboelen
c397b20b68 Initialize some variables for cleaner output 2015-04-22 00:57:35 +02:00
mboelen
0d900536a5 Remove priority label 2015-04-21 16:03:14 +02:00
mboelen
94607e4ae4 Redirect sysctl errors properly 2015-04-20 11:35:02 +02:00
mboelen
a6290d1bec Enhance screen output on Mac OS 2015-04-19 22:10:27 +02:00
mboelen
4c8a6dc3d2 Rename of package auditing tool, for upcoming plugin/module 2015-04-17 15:50:46 +02:00
mboelen
a29335823f Improved core dump checking 2015-04-16 20:00:09 +02:00
mboelen
017c145357 Zypper enhancements 2015-04-16 19:59:51 +02:00
mboelen
3bce5191ef Apply group check on all groups when using AIX 2015-04-16 19:00:03 +02:00
mboelen
de60926705 Changed sed statement 2015-04-13 22:06:14 +02:00
mboelen
95d5cabdb2 Ensure sysctl is present before calling it 2015-04-07 17:20:11 +02:00
mboelen
7ad2dd5480 Change pf firewall detection 2015-04-07 17:19:49 +02:00
mboelen
e21e8679e0 Check also /var and assign hardening points 2015-04-07 17:19:25 +02:00
mboelen
7785c5a610 Improved report output 2015-04-07 17:18:54 +02:00
mboelen
f85d33fe42 Improved text for malware scanner suggestion 2015-04-07 17:17:35 +02:00
mboelen
d5bdde7a93 Changed counting with -m to support locale 2015-04-02 13:29:18 +02:00
mboelen
d2175e833d Change description of test 2015-04-01 14:45:12 +02:00
mboelen
c2bbf4a0a7 Improved detection for McAfee anti-virus (cma) 2015-04-01 14:22:53 +02:00
mboelen
003d4857bb Updated last line 2015-03-31 19:20:57 +02:00
mboelen
d16732a47a Smart replacement does not work on Solaris, rewriting domain extraction from FQDN 2015-03-31 19:20:42 +02:00
mboelen
f9c79007b8 Updated functions for checking permissions on files 2015-03-25 17:31:47 +01:00
mboelen
9978e5c824 Using return codes and minor cleanups of code 2015-03-25 17:31:17 +01:00
mboelen
30bc903c5a Using return codes for file permission checks 2015-03-25 17:30:13 +01:00
mboelen
c94269c1d1 Add lynis audit dockerfile as option 2015-03-25 16:49:02 +01:00
mboelen
e1d96752f2 Removed variable 2015-03-25 16:48:39 +01:00
mboelen
5ecbaafa4f Use improved function with return values 2015-03-25 16:47:37 +01:00
mboelen
355bf37459 Changed copyright line 2015-03-25 15:55:46 +01:00
mboelen
7f97bfa973 Typos corrected 2015-03-25 15:55:29 +01:00
mboelen
3cda4cf562 Added CUPS location for Mac OS 2015-03-23 21:38:37 +01:00
mboelen
bdf8347162 Don't require sha1sum AND openssl AND csum, but just one of them to exist 2015-03-19 00:03:58 +01:00
mboelen
9932e878b1 Clarified message 2015-03-18 16:06:02 +01:00