lynis
lynis copied to clipboard
CISOfy
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
``` Exception found! Function/test: [OS Detection] Message: Unknown OS found in /etc/os-release - Please create an issue on GitHub and share thethe contents (cat /etc/os-release): https://github.com/CISOfy/lynis ``` Well, as I...
**Describe the bug** Lynis 3.0.7 show this suggestion: * The database required for 'locate' could not be found. Run 'updatedb' or 'locate.updatedb' to create this file. [FILE-6410] https://cisofy.com/lynis/controls/FILE-6410/ But that...
https://github.com/CISOfy/lynis/blob/64758216f20bfb198ae45a258fb2bb9e8ecdbc45/include/tests_kernel#L42-L44 The above check doesn't work in: - Debian 8 - Debian 11 - Ubuntu 20.04 - Archlinux - Manjaro Due to that file not being present in them in...
Running Lynis `master` on my Pinephone, it failed to detect the OS. Indeed, PostmarketOS was not yet included in the OS detection logic. Here is the `/etc/os-release` for reference. ```...
**Describe the bug** Exception found! Function/test: [OS Detection] Message: Unknown OS found in /etc/os-release **Version** - Distribution Arch Linux ARM - Lynis version 3.0.7 **Expected behavior** Need to add OS...
**Is your feature request related to a problem? Please describe.** most embedded systems are minimal installations that deploy busybox. as lynis expects standard gnu bash, ps, grep etc. this fails...
I have two different installations with Arch Linux x86_64 5.16.10-arch1-1. On both is Homebrew for Linux installed with default setup. [homebrew-on-linux](https://docs.brew.sh/Homebrew-on-Linux#homebrew-on-linux-community) I tested first Arch Linux with lynis 3.0.7 "sudo...
**Describe the bug** All ReportSuggestion lines have ${TEST_NO} as first argument, except one in tests_nameservices file The following command shoud return nothing, but return 1 line : grep -r ReportSuggestion...
Updated the arch-audit command to list out the vulnerable packages. https://security.archlinux.org/ Fix Issue #1277
