lynis

lynis copied to clipboard

**Describe the bug** A Lynis audit reports the following despite explicitly using `sha256` and/or `sha512` in `aide.conf`: ``` * Use SHA256 or SHA512 to create checksums in AIDE [FINT-4402] https://cisofy.com/lynis/controls/FINT-4402/...

ldilley

**Describe the bug** An exception is reported: Exception occurred, no output from apt-cache policy **Version** - Distribution Ubuntu 20.04 - Lynis version 3.0.6 **Expected behavior** **Output** ``` 2021-10-13 16:24:05 Performing...

fizista

**Is your feature request related to a problem? Please describe.** Finding some way of including NIST standards into this would be amazing and first by starting with this new NIST...

austinsonger

Httpd configuration: Can not determine symlink /etc/httpd/common/.conf

4

**Describe the bug** Lynis couldn't open symlink files realted to apache Function/test: [FileIsReadable] Message: Can not determine symlink /etc/httpd/common/.conf **Version** -Distribution 3.10.0-1160.42.2.el7.x86_64 - Lynis version 3.0.6 **Expected behavior** A clear...

Ahmadhashem86

Exceptions found (HTTP-6624:1) with text Found some unknown directory or file references in Apache configuration

2

**Describe the bug** [+] Software: webserver ------------------------------------ - Checking Apache (binary /usr/sbin/apache2) [ FOUND ] [Notice] possible directory/file parts found, but still unsure what the real configuration file is. Skipping...

MaxPeal

SSH-7402 fails to generate a copy of sshd_config

6

**Describe the bug** executing `sshd -T -C user=doesnotexist,host=none,addr=none` returns non zero and no config, causing all of SSH-7408 (option checking) to return `NOT FOUND` **Version** - Distribution Arch Linux (rolling...

vinceoa

Apache: Configurations with Aliases not detected as vhosts

2

**Describe the bug** Lynis didn't find any virtual hosts, but I actually have some **Version** - Distribution: openSUSE Tumbleweed - Lynis version 3.0.6 **Expected behavior** virtual hosts are detected **Output**...

ghost

**Is your feature request related to a problem? Please describe.** When running `audit system` on workstation with fewer logical iptables like drop input everything, allow all out, allow in established...

sbe-arg

**Is your feature request related to a problem? Please describe.** If the locale on the system is not English some tests such as `KRNL-5788` will fail. E.g., if `LC_ALL=fr_FR.UTF-8`, `apt-cache...

ithinuel

Added FILE-6398 (JBD driver loaded?) test

sanderu