Commit graph

156 commits

Author SHA1 Message Date
Michael Boelen
6e549eb545
Set ip binary 2018-01-18 16:23:55 +01:00
BlessJah
d7d42d9103 remove non printable characters from code (#470)
Non printable ESC character is required to obtain terminal escape
sequence i.e. for changing output color.

Such sequences (especially ESC character) were replaced by command
substitution producing exactly same result (variable value), but using
only "safe" characters.

Use of printf and especialy '\033' or '\0ddd' sequences is described
here:
http://pubs.opengroup.org/onlinepubs/9699919799/utilities/printf.html#tag_20_94_13

Use of $(command) or command substitution is described here:
http://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3_chap02.html#tag_18_06_03

Verbatim TAB characters were replaced with \t escape sequence as
described to avoid problems with editors silently replacing them or
developer accidentialy messing up the regex.
2018-01-17 17:12:36 +01:00
Michael Boelen
66f8cb2441
Changed year 2018-01-11 09:50:26 +01:00
Michael Boelen
c487bcb277
\-C flag of ps is different on BSD 2017-12-24 14:05:55 +01:00
Michael Boelen
4042c45954
Changes for new plugin class 'hardware' 2017-12-08 09:37:55 +01:00
Michael Boelen
499f7d5015
Improve process detection 2017-09-16 14:08:26 +02:00
Michael Boelen
a547953d99
Set default log directory, or allow it be set per OS 2017-08-08 14:52:59 +02:00
Michael Boelen
4ecb9d4d05
[bulk change] cleaning up, code enhancements, initialization of variables, and new tests 2017-04-30 17:59:35 +02:00
Michael Boelen
a04b2da851
Initialize variables 2017-04-23 20:19:02 +02:00
Michael Boelen
a8c021dd9c Status of MongoDB instances 2017-02-10 13:07:53 +01:00
Michael Boelen
34ba1ba184 Changed date and preparing for release 2017-02-09 13:35:40 +01:00
Michael Boelen
aadd58e6a6 Allow option to configure host IDs via profile 2016-12-02 13:19:29 +01:00
Michael Boelen
b5a1deae47 Added variable for readlink binary 2016-11-08 19:47:59 +01:00
Michael Boelen
1cb1fc40ca Added more definitions for tools 2016-10-28 11:48:20 +02:00
Michael Boelen
d0eae6480d Support for Docker container detection 2016-10-16 15:13:04 +02:00
Michael Boelen
063f50f39c Add upload-only command 2016-10-13 20:15:00 +02:00
Michael Boelen
870ac295c6 Show possible solution with findings 2016-09-24 15:51:05 +02:00
Michael Boelen
9e7dfd52d8 Initialize variables for binaries 2016-09-10 16:11:43 +02:00
Michael Boelen
fdf3ded89f New command 'lynis show details' to display test details 2016-08-26 14:05:20 +02:00
Michael Boelen
c11f7fc1ce Do not show update message when using 'show' helper 2016-08-23 20:21:26 +02:00
Michael Boelen
c730a3185e Add StoreNginxSettings function to store parsed nginx configuration 2016-08-16 08:07:08 +02:00
Michael Boelen
e06db1477d Add notebook hardware detection 2016-08-13 16:38:07 +02:00
Michael Boelen
89cb348950 Variable for reason why tests are skipped 2016-08-13 11:16:37 +02:00
Michael Boelen
bcfdcc2b97 Add show-report-solution setting 2016-08-13 09:45:38 +02:00
Michael Boelen
aaa89fc6ce Set initial root directory to '/' 2016-08-11 19:55:29 +02:00
Michael Boelen
e176011912 Allow repository update to be disabled 2016-08-11 10:01:29 +02:00
alobodzinski
1d63d89dfd OS_KERNELVERSION_FULL is set only on Linux, OS_KERNELVERSION is not set on AIX, HP-UX, and Solaris (#254)
Set initial values
2016-08-04 14:24:44 +02:00
Michael Boelen
cfdc8228fd [PKGS-7388] Readability improvements and initialization 2016-07-30 16:40:44 +02:00
Michael Boelen
af999d3207 Allow strict code checking for developers 2016-07-28 11:39:10 +02:00
Michael Boelen
ff3f13cdd0 Make Lynis run in quick mode by default 2016-07-27 12:14:25 +02:00
Michael Boelen
37763dcf4f [DBS-1880] Detection for redis 2016-07-24 19:46:45 +02:00
Michael Boelen
2f4c854ba7 Rename of categories, introduction of groups 2016-07-24 17:22:00 +02:00
Michael Boelen
65eaeb7ce9 Add header as color 2016-07-24 13:05:36 +02:00
Michael Boelen
c1d351fe32 Add bold as color 2016-07-24 11:43:18 +02:00
Michael Boelen
cb76421d9c Proper display of tool tips configuration, while not showing tips when using show module 2016-07-12 20:09:10 +02:00
Michael Boelen
c090e73ca1 Add blue colors for tips 2016-07-11 20:06:46 +02:00
Michael Boelen
474455d18b Define colors 2016-07-05 19:55:31 +02:00
Michael Boelen
f8bee58ade Implement tooltips 2016-07-05 18:18:54 +02:00
Michael Boelen
bac442c6fe Migrate to new options, including skip-plugins 2016-07-05 17:26:27 +02:00
Michael Boelen
998af3d7de Add variable for settings and SSL paths 2016-07-05 16:45:27 +02:00
Michael Boelen
f8b134f3c3 Add automatic detection of used language 2016-06-11 14:34:21 +02:00
Michael Boelen
f851834dbd Added support for multiple languages 2016-06-11 14:09:41 +02:00
Michael Boelen
6b05d59855 Add variables for alternative upload tool 2016-06-07 17:00:12 +02:00
Michael Boelen
049569ceca Set default value for CHECK 2016-05-04 13:42:46 +02:00
Michael Boelen
924e53ed76 Do an earlier detection of grsecurity and store result, so tests can be simplified 2016-05-03 10:58:05 +02:00
mboelen
f109c318d9 Detect when weak protocols are used, simplify nginx test 2016-04-27 16:51:12 +02:00
mboelen
55799a524c Added developer mode (--developer) 2016-04-26 13:40:21 +02:00
mboelen
7878fad617 Removed --config option in favor of lynis show profiles 2016-04-25 20:04:00 +02:00
mboelen
4dcb9eccff Allow skipping of plugins with --skip-plugins or skip-plugins 2016-04-25 16:00:10 +02:00
mboelen
2f07fa1d87 Allow show-warnings-only and --(show-)warnings-only option 2016-04-25 11:10:23 +02:00
mboelen
eae8ef99a4 Exit with exit code 0 by default, unless error-on-warnings is being used 2016-04-25 10:18:09 +02:00
mboelen
904da4d123 Allow additional profile with --profile 2016-04-23 17:55:32 +02:00
mboelen
f0e7b531cd Add --verbose option 2016-04-19 19:46:20 +02:00
mboelen
e9eae5b8b5 Allow skipping of individual tests or atomic tests 2016-04-19 12:37:00 +02:00
mboelen
1205511c9d Change of variables for IDS/IPS and layout changes 2016-04-15 20:07:20 +02:00
mboelen
af13d322b9 Updated colors 2016-04-12 21:58:01 +02:00
mboelen
40d11eb37b Added variables related to database status 2016-04-02 18:27:32 +02:00
mboelen
d7c8233dd4 Check for systemd 2016-03-24 17:15:39 +01:00
mboelen
8cc47819b4 Removed copyright line, added description 2016-03-13 16:03:46 +01:00
mboelen
6197ac08e7 Added link to website, blog, github 2016-03-13 16:00:39 +01:00
mboelen
2aa9b9a9b1 Changed custom URLs for hardening tips 2016-02-15 12:39:06 +01:00
mboelen
ac5c98d76c Show what profile is used when using --config 2016-02-02 17:07:20 +01:00
mboelen
1cb90916ee Added functions and variables for creation of temporary files 2016-01-11 01:04:04 +01:00
mboelen
f313b2edf8 Allow defining a proxy for data uploads 2016-01-07 12:57:24 +01:00
mboelen
72b0f65438 [LOGG-2154] Check for remote syslogging, more in-depth testing 2015-12-22 16:56:15 +01:00
mboelen
95832c61d1 Update to reflect renamed functions logtext and report 2015-12-22 16:02:32 +01:00
mboelen
c12a4403aa Preparations for compressed uploads 2015-12-21 15:15:51 +01:00
mboelen
040c2efc1c Perform compressed uploads by default 2015-12-21 12:08:47 +01:00
mboelen
4b9b8a0bc7 New option for compressed uploads 2015-12-21 11:35:38 +01:00
mboelen
2b101e75e8 Audit status of application firewall and added test for Mac OS X (FIRE-4532) 2015-12-02 17:37:58 +01:00
mboelen
510de19ce9 NETW-3004 now collects interfaces from most common operating systems 2015-10-27 13:33:16 +01:00
mboelen
7b3299fcb9 Changes to AUTH-9286 to check for minimum age as well 2015-10-27 12:42:41 +01:00
mboelen
d058ba8bfc Added password history tests to PAM plugin 2015-10-22 15:55:14 +02:00
mboelen
69cbabfed2 Log when vulnerable packages are found 2015-10-21 21:45:53 +02:00
mboelen
a5583da5c3 Adding correct variables for proper logging and testing 2015-10-15 15:57:27 +02:00
mboelen
9d1cec8a9b Changes to check for presence BusyBox, to better support platforms using this as primary shell 2015-10-14 16:49:57 +02:00
mboelen
a99a3d348e Added audit daemon and PAM variables 2015-10-08 16:25:35 +02:00
mboelen
385e62b6a5 Compliance variables 2015-10-01 22:38:29 +02:00
mboelen
4c0fa90478 Added variables for compliance standards like HIPAA, ISO27001/ISO27002 and PCI-DSS 2015-10-01 11:58:34 +02:00
mboelen
c9c78f751d Added plugin phase variable and specific PAM settings 2015-10-01 11:49:30 +02:00
mboelen
4f5eedabfc Added the detection of LMD, or Linux Malware Detect tooling 2015-09-24 16:45:03 +02:00
mboelen
d786c687a1 Added variables which were not initialized before 2015-09-16 17:00:12 +02:00
mboelen
28d9a49a5f Renamed BINPATHS to BIN_PATHS 2015-09-10 19:45:12 +02:00
mboelen
b6c0736d6e Added counters for suggestions and warnings 2015-09-10 08:35:57 +02:00
mboelen
919995eb5a Added UEFI_BOOTED_SECURE 2015-09-07 17:40:26 +02:00
mboelen
429fb62fd7 Added UEFI_BOOTED 2015-09-07 17:40:03 +02:00
mboelen
53840a4cfb Added variable for logging status of failed logins 2015-09-07 11:17:08 +02:00
mboelen
88caa85f59 Added default values for name cachers and Unbound status 2015-09-06 21:37:26 +02:00
mboelen
95d08a735a Optimizing code, cleaning up 2015-07-22 12:20:27 +02:00
mboelen
fe636c7d6c Docker support 2015-05-27 11:25:35 +02:00
mboelen
52b8c3a6a7 Added VMTYPE 2015-05-26 11:10:50 +02:00
mboelen
8ae3cfd5ad Remove unused variable 2015-04-30 01:25:18 +02:00
mboelen
1ece78f1a8 Set default for showing program details at start 2015-04-30 01:23:47 +02:00
mboelen
c397b20b68 Initialize some variables for cleaner output 2015-04-22 00:57:35 +02:00
mboelen
2e0c90079b Added custom appending/prepending of URLs for control information 2015-01-30 18:09:46 +01:00
mboelen
da0cc9d403 Added helper, report and upload related defaults 2015-01-30 13:14:18 +01:00
mboelen
5caf4ddc4f Update of the files to reflect HTTPS version of website and 2015. Happy New Year! 2015-01-03 12:45:22 +01:00
mboelen
f9d5f9f017 Added NetBSD paths and changed copyright line 2014-12-03 22:44:31 +01:00
mboelen
68234525a3 New variables 2014-11-29 16:21:13 +01:00
mboelen
a68b226d3a Added BINARY_SCAN_FINISHED 2014-10-13 19:56:44 +02:00