We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration.
Lynis is an open source security auditing tool. Used by system administrators, security professionals, and auditors, to evaluate the security defenses of their Linux and UNIX-based systems. It runs on the host itself, so it performs more extensive security scans than vulnerability scanners.
- Mac OS
- and others
It even runs on systems like the Raspberry Pi and several storage devices!
Lynis is light-weight and easy to use. Installation is optional: just copy it to a system, and use “./lynis audit system” to start the security scan. It is written in shell script and released as open source software (GPL).
- Determine operating system
- Search for available tools and utilities
- Check for Lynis update
- Run tests from enabled plugins
- Run security tests per category
- Report status of security scan
- Security auditing
- Compliance testing (e.g. PCI, HIPAA, SOx)
- Vulnerability detection and scanning
- System hardening
- Best practices
- OpenSCAP data
- Vendor guides and recommendations (e.g. Debian Gentoo, Red Hat)
Plugins enable the tool to perform additional tests. They can be seen as an extension (or add-on) to Lynis, enhancing its functionality. One example is the compliance checking plugin, which performs specific tests only applicable to some standard.
## Lynis 2.7.3 (2019-03-21) ### Added - Detection for Lynis being scheduled (e.g. cronjob) ### Changed - HTTP-6624 - Improved logging for test - KRNL-5820 - Changed color for default fs.suid_dumpable value - LOGG-2154 - Adjusted test to search in configuration file correctly - NETW-3015 - Added support for ip binary - SQD-3610 - Description of test changed - SQD-3613 - Corrected description in code - SSH-7408 - Increased values for MaxAuthRetries - Improvements to allow tailored tool tips in future - Corrected detection of blkid binary - Minor textual changes and cleanups