Lynis 2.6.2

Lynis 2.6.2 (2018-02-13)

Changes:

• Bugfix for Arch Linux (binary detection)
• Textual changes for several tests
• Update of tests database

Lynis 2.6.1

Lynis 2.6.1 (2018-01-26)

Changes:

• Tests can have more than 1 required OS (e.g. Linux OR NetBSD)
• Added 'system-groups' option to profile (Enterprise users)
• Overhaul of default profile and migrate to new style (setting=value)
• Show warning if old profile options are used
• Improved detection of binaries
• New group 'usb' for tests related to USB devices

Tests:

• [FILE-6363] - New test for /var/tmp (sticky bit)
• [MAIL-8802] - Added exim4 process name to improve detection of Exim
• [NETW-3030] - Changed name of dhcp client name process and added udhcpc
• [SSH-7408] - Restored UsePrivilegeSeparation
• [TIME-3170] - Added chrony configuration file for NetBSD

Lynis 2.6.0

Lynis 2.6.0 (2018-01-18)

Changes:

• Binary paths are now sorted
• Greek language added
• systemd detection improved
• VirtualBox detection extended
• Several code enhancements

Tests:

• [PHP-2379] - Small enhancement to resolve error on screen in some cases
• [MALW-3280] - Improved detection for BitDefender tooling

Lynis 2.5.9

Lynis 2.5.9 (2018-01-12)

Changes:

• Don't show upgrade notice when being quiet/silent
• Added --noplugins as an alias to skip execution of plugins
• Use PATH variable for path detection, with predefined list as a backup

Tests:

• [KRNL-6000] Multiple values are now allowed per sysctl key
• [KRNL-6000] Individual tests can be skipped (skip-test=KRNL-6000:)
• [KRNL-6000] Solution text has been added

Lynis 2.5.8

Changes:

• Check for empty files improved on several locations
• New allow-auto-purge setting in profile for short-lived systems
• Additional checks for log and report file
• Changes to support time synchronization in old and newer systemd releases
• Enhanced output for systems other than Linux

Plugins:

• New class (hardware) added and enabled in default profile

Lynis 2.5.7

Lynis 2.5.7 (2017-10-29)

Changes:

• Update of Portuguese translation
• Added --silent as alias for --quiet
• Reduced screen output when running non-privileged
• IsRunning function now allows full name process match

Lynis 2.5.6

Lynis 2.5.6 (2017-10-27)

Changes:

• Added additional keywords for banners
• DirectAdmin extensions
• Enhancements to process detection
• Spanish translation extended
• Extended HP-UX support
• Only show relevant messages in report

Tests:

• [NETW-2705] - Allow local resolvers to bypass requirement for 2+ name servers
• [SSH-7408] - Define default 'delayed' compression as a sane value for SSH tests
• [SHLL-6220] - Improved detection of shell settings

Lynis 2.5.5

Lynis 2.5.5 (2017-09-07)

Changes:

Minor release to solve errors on screen

Tests:

• CRYP-7902 - certificate validation changed

Lynis 2.5.4

Lynis 2.5.4 (2017-09-05)

Changes:

• Improve systemd detection
• Detect Linux Mint version
• Older versions of Mac OS X are detected as well
• Norwegian translation added
• PAM plugin extended

Tests:

• CRYP-7902 - certificate validation changed
• FIRE-4508 - Improved screen output
• PKGS-7380 - NetBSD vulnerability detection adjusted
• TOOL-5002 - Improved detection of Ansible directories and files

Lynis 2.5.3

Lynis 2.5.3 (2017-08-17)

Changes:

• DirectAdmin location added
• Small adjustments to text
• Enhanced detection for LXC and LXC
• Added /opt/apache as a target location
• Default log directory set for HP-UX
• Screen output improvements

Tests:

• CRYP-7902 - Prevent test from showing error on screen
• FILE-6310 - Detection of mount point now match exact name
• HRDN-7230 - Show single line when no malware scanner was detected
• NETW-3006 - Updated detection of MAC addresses on Linux
• PKGS-2379 - Improvement for OpenBSD usage of PHP suhosin
• TOOL-5002 - Detection capabilities for Ansible added