lynis-2.5.1-54.1.noarch.rpm


Advertisement

Description

lynis - Security and System auditing tool

Distribution: openSUSE 42.1
Repository: openSUSE Network Utilities all
Package name: lynis
Package version: 2.5.1
Package release: 54.1
Package architecture: noarch
Package type: rpm
Installed size: 1.30 MB
Download size: 231.56 KB
Official Mirror: ftp.gwdg.de
Lynis is a security and system auditing tool. It scans a system on the most interesting parts useful for audits, like: - Security enhancements - Logging and auditing options - Banner identification - Software availability

Alternatives

Provides

  • config(lynis) = 2.5.1-54.1
  • lynis = 2.5.1-54.1

    Download

    Source package: lynis-2.5.1-54.1.src.rpm

    Install Howto

    1. Add the openSUSE Network Utilities repository:
      # zypper addrepo http://ftp.gwdg.de/pub/opensuse/repositories/network:/utilities/openSUSE_Leap_42.1/ opensuse-network-utilities
    2. Install lynis rpm package:
      # zypper install lynis

    Files

    • /etc/lynis/default.prf
    • /usr/bin/lynis
    • /usr/share/doc/packages/lynis/CHANGELOG.md
    • /usr/share/doc/packages/lynis/CONTRIBUTORS.md
    • /usr/share/doc/packages/lynis/FAQ
    • /usr/share/doc/packages/lynis/LICENSE
    • /usr/share/doc/packages/lynis/README
    • /usr/share/lynis/prepare_for_suse.sh
    • /usr/share/lynis/db/dbus-whitelist.db
    • /usr/share/lynis/db/fileperms.db
    • /usr/share/lynis/db/hints.db
    • /usr/share/lynis/db/integrity.db
    • /usr/share/lynis/db/malware-susp.db
    • /usr/share/lynis/db/malware.db
    • /usr/share/lynis/db/sbl.db
    • /usr/share/lynis/db/tests.db
    • /usr/share/lynis/db/languages/br
    • /usr/share/lynis/db/languages/cn
    • /usr/share/lynis/db/languages/de
    • /usr/share/lynis/db/languages/en
    • /usr/share/lynis/db/languages/en-GB
    • /usr/share/lynis/db/languages/en-US
    • /usr/share/lynis/db/languages/es
    • /usr/share/lynis/db/languages/fi
    • /usr/share/lynis/db/languages/fr
    • /usr/share/lynis/db/languages/he
    • /usr/share/lynis/db/languages/hu
    • /usr/share/lynis/db/languages/it
    • /usr/share/lynis/db/languages/ja
    • /usr/share/lynis/db/languages/nl
    • /usr/share/lynis/db/languages/nl-BE
    • /usr/share/lynis/db/languages/nl-NL
    • /usr/share/lynis/db/languages/pl
    • /usr/share/lynis/db/languages/pt
    • /usr/share/lynis/db/languages/ru
    • /usr/share/lynis/db/languages/se
    • /usr/share/lynis/db/languages/tr
    • /usr/share/lynis/include/binaries
    • /usr/share/lynis/include/consts
    • /usr/share/lynis/include/data_upload
    • /usr/share/lynis/include/functions
    • /usr/share/lynis/include/helper_audit_dockerfile
    • /usr/share/lynis/include/helper_configure
    • /usr/share/lynis/include/helper_show
    • /usr/share/lynis/include/helper_system_remote_scan
    • /usr/share/lynis/include/helper_update
    • /usr/share/lynis/include/osdetection
    • /usr/share/lynis/include/parameters
    • /usr/share/lynis/include/profiles
    • /usr/share/lynis/include/report
    • /usr/share/lynis/include/tests_accounting
    • /usr/share/lynis/include/tests_authentication
    • /usr/share/lynis/include/tests_banners
    • /usr/share/lynis/include/tests_binary_rpath
    • /usr/share/lynis/include/tests_boot_services
    • /usr/share/lynis/include/tests_containers
    • /usr/share/lynis/include/tests_crypto
    • /usr/share/lynis/include/tests_custom.template
    • /usr/share/lynis/include/tests_databases
    • /usr/share/lynis/include/tests_file_integrity
    • /usr/share/lynis/include/tests_file_permissions
    • /usr/share/lynis/include/tests_file_permissionsDB
    • /usr/share/lynis/include/tests_file_permissions_ww
    • /usr/share/lynis/include/tests_filesystems
    • /usr/share/lynis/include/tests_firewalls
    • /usr/share/lynis/include/tests_hardening
    • /usr/share/lynis/include/tests_homedirs
    • /usr/share/lynis/include/tests_insecure_services
    • /usr/share/lynis/include/tests_kernel
    • /usr/share/lynis/include/tests_kernel_hardening
    • /usr/share/lynis/include/tests_ldap
    • /usr/share/lynis/include/tests_logging
    • /usr/share/lynis/include/tests_mac_frameworks
    • /usr/share/lynis/include/tests_mail_messaging
    • /usr/share/lynis/include/tests_malware
    • /usr/share/lynis/include/tests_memory_processes
    • /usr/share/lynis/include/tests_nameservices
    • /usr/share/lynis/include/tests_network_allowed_ports
    • /usr/share/lynis/include/tests_networking
    • /usr/share/lynis/include/tests_php
    • /usr/share/lynis/include/tests_ports_packages
    • /usr/share/lynis/include/tests_printers_spools
    • /usr/share/lynis/include/tests_scheduling
    • /usr/share/lynis/include/tests_shells
    • /usr/share/lynis/include/tests_snmp
    • /usr/share/lynis/include/tests_squid
    • /usr/share/lynis/include/tests_ssh
    • /usr/share/lynis/include/tests_storage
    • /usr/share/lynis/include/tests_storage_nfs
    • /usr/share/lynis/include/tests_system_dbus
    • /usr/share/lynis/include/tests_system_integrity
    • /usr/share/lynis/include/tests_system_proc
    • /usr/share/lynis/include/tests_time
    • /usr/share/lynis/include/tests_tmp_symlinks
    • /usr/share/lynis/include/tests_tooling
    • /usr/share/lynis/include/tests_users_wo_password
    • /usr/share/lynis/include/tests_virtualization
    • /usr/share/lynis/include/tests_webservers
    • /usr/share/lynis/include/tool_tips
    • /usr/share/lynis/plugins/README
    • /usr/share/lynis/plugins/custom_plugin.template
    • /usr/share/man/man8/lynis.8.gz

    Changelog

    2017-06-08 - astieger@suse.com - Lynis 2.5.1: * Improved detection of SSL certificate files * Minor changes to improve logging and results * Firewall tests: Determine if CSF is in testing mode - includes changes from Lynis 2.5.0: * CVE-2017-8108: symlink attack may have allowed arbitrary file overwrite or privilege escalation (bsc#1043463) * Deleted unused tests from database file * Additional sysctls are tested * Extended test with Symantec components * Snort detection * Snort configuration file

    2017-04-04 - tuukka.pasanen@ilmi.fi - Lynis 2.4.8 (Changelog from 2.4.1) * More PHP paths added * Minor changes to text * Show atomic test in report * Added FileInstalledByPackage function (dpkg and rpm supported) * Mark Arch Linux version as rolling release (instead of unknown) * Support for Manjaro Linux * Escape files when testing if they are readable * Code cleanups * Allow host alias to be specified in profile * Code readability enhancements * Solaris support has been improved * Fix for upload function to be used from profile * Reduce screen output for mail section, unless --verbose is used * Code cleanups and removed 'update release' command * Colored output can now be tuned with profile (colors=yes/no) * Allow data upload to be set as a profile option * Properly detect SSH daemon version * Generic code improvements * Improved the update check and display * Finish, Portuguese, and Turkish translation * Extended support and tests for DragonFlyBSD * Option to configure hostid and hostid2 in profile * Support for Trend Micro and Cylance (macOS) * Remove comments at end of nginx configuration * Used machine ID to create host ID when no SSH keys are available * Added detection of iptables-save to binaries Tests: BANN-7126 - Added more words to test for CUPS-2308 - Improve logging for CUPS configuration test, removed exception handler HTTP-6641 - Support detection for Apache module mod_reqtimeout PKGS-7388 - Minor change to detect security repositories CRYP-7902 - Test more certificates names, but only if they are not part of a package FILE-7524 - Reduce standard screen output for file permissions check MALW-3280 - Added Avira detection as a malware scanner NAME-4018 - Only perform name services test when resolv.conf file exists PKGS-7387 - Check all repositories if they use GPG signing SCHD-7704 - Permission checks TIME-3104 - Check permissions before open files AUTH-9328 - Add missing 0027 and 0077 umasks BOOT-5104 - Add initsplash and minor code enhancements DBS-1882 - Include Redis configuration file FIRE-4502 - Improved detection for iptables modules when using OpenVZ PKGS-7381 - Enhanced package audit for FreeBSD AUTH-9308 - Improved test for sulogin string (Debian systems) FILE-6372 - Properly deal with comment on lines in /etc/fstab MAIL-8817 - New test to check Postfix configuration for errors SSH-7408 - Corrected SSH check AUTH-9308 - Improved test for sulogin string MAIL-8818 - Test if Linux version is known before comparing in Postfix banner TIME-3116 - Skip stratum 16 items for time pools TIME-3148 - New test to detect TZ variable AUTH-9208 - Removed double logging AUTH-9222 - Improve logging for double groups AUTH-9226 - Improve logging for double groups BOOT-5177 - Sort systemctl unit files to make them unique DBS-1818 - New test to detect MongoDB DBS-1820 - New test for MongoDB authentication FIRE-4512 - Lowered minimum number of iptables firewall rules FIRE-4586 - Fix applied when searching for "-j LOG" HRDN-7222 - Changed reporting key of world executable compilers SSH-7408 - Added filtering for PermitRootLogin (prohibit-password, OpenSSH 7.0) FIRE-4586 - Check logging for firewall components KRNL-5788 - Remove exception and style improvements KRNL-5830 - Improved logging

    Advertisement
    Advertisement