lynis
lynis copied to clipboard
CISOfy
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
- This PR closes #1280 - Spent sometime trying to get ypbind up and running but couldn't. So this is not tested.
Pull request that fixes issues 1325 and 1276. It checks /sys/block/*/queue/scheduler, and sets LINUX_KERNEL_IOSCHED with the scheduler of the last block device checked. A few observations: - Was tested in...
The `.editorconfig` file works for most modern editors. It ensures the indentation standards for the repository are consistent with what's in `CONTRIBUTING.md`. See [here](https://editorconfig.org/) for more settings. Updated `include/osdetection` so...
**Describe the bug** pam_cracklib; pam_passwdqc and apt-listbugs are no longer available on Ubuntu. **Version** - Distribution: Ubuntu 22.10 - Lynis version: 3.0.7+ **Expected behavior** The check does not throw up...
This pull request just adds the name of the latest package (libpam-passwdqc) for checking password strength used in Debian and Ubuntu distributions. Solves issue https://github.com/CISOfy/lynis/issues/1354 Run test AUTH-9262 with and...
This pull request fixes issue 1367: https://github.com/CISOfy/lynis/issues/1367 Tested on: - Debian 11, kernel 5.10.0. Failure and success. - Ubuntu 19.04, kernel 5.0, which skipped the test because on minor version...
**Describe the bug** There's a bug in the check for prerequirements where the kernel version is checked: ```bash LINUX_KERNEL_MAJOR=$(echo $OS_KERNELVERSION | ${AWKBINARY} -F. '{print $1}') LINUX_KERNEL_MINOR=$(echo $OS_KERNELVERSION | ${AWKBINARY} -F....
When running lynis audit system as a non-privileged user, and assuming dockerd running as root, lynis will report an ERROR por Docker status but will report NONE for "Docker info...
 ([Source](https://xkcd.com/838/))
**Describe the bug** When I run lynis without root privileges, instead of giving an informative error message it just gives out this a permission denied error. **Version** - Distribution: Arch...
