Skip to content

Lynis 3.0.2
Compare
Choose a tag to compare
@mboelen mboelen released this 24 Dec 09:31
· 579 commits to master since this release
3.0.2
This tag was signed with the committer’s verified signature. The key has expired.
mboelen Michael Boelen
GPG key ID: 26141F77A09D7F04
Expired
Learn about vigilant mode.
0c9ae15
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Lynis 3.0.2 (2020-12-24)

Added

  • AUTH-9284 - Scan for locked user accounts in /etc/passwd
  • LOGG-2153 - Loghost configuration
  • TOOL-5130 - Check for active Suricata daemon
  • OS detection of Flatcar, IPFire, Mageia, NixOS, ROSA Linux, SLES (extended), Void Linux, Zorin OS
  • OS detection of OpenIndiana (Hipster and Legacy), Shillix, SmartOS, Tribblix, and others
  • EOL dates for Alpine, macOS, Mageia, OmniosCE, and Solaris 11
  • Support for Solaris svcs (service manager)
  • Enumeration of Solaris services

Changed

  • ACCT-9626 - Detect sysstat systemd unit
  • AUTH-9230 - Only fail if both SHA_CRYPT_MIN_ROUNDS and SHA_CRYPT_MAX_ROUNDS are undefined
  • BOOT-5184 - Support for Solaris
  • KRNL-5830 - Improved reboot test by ignoring known bad values
  • KRNL-5830 - Ignore rescue kernel such as on CentOS systems
  • KRNL-5830 - Detection of Alpine Linux kernel
  • NETW-2400 - Compatibility change for hostname check
  • NETW-3012 - Support for Solaris
  • PKGS-7410 - Don't show exception if no kernels were found on the disk
  • TIME-3185 - Supports now checking files at multiple locations (systemd)
  • ParseNginx function: Support include on absolute paths
  • ParseNginx function: Ignore empty included wildcards
  • Set 'RHEL' as OS_NAME for Red Hat Enterprise Linux
  • HostID: Use first e1000 interface and break after match
  • Translations extended and updated
  • Test if pgrep exists before using it
  • Better support for busybox shell
  • Small code enhancements
Assets 2
Loading