Audit your Linux box with Lynis

Is your linux box secure? Have you changed the default settings from the install? is SSH remote root access open? Is your firewall configured? Lynis is a great tool to show you what is open on your computer, what has default settings applied, and shows you what needs a fixn’. This software provides a quick but thorough scan of your box. You still have to do the work to harden you computer, but at least you have a very good idea of what needs to be fixed.

You can install the software through your package manager, or download from their website http://www.rootkit.nl/projects/lynis.html .

lynis-screenshotLynis is an auditing tool for Unix (specialists). It scans the system and available software, to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes.

This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems. It can be run without prior installation, so inclusion on read only storage is no problem (USB stick, cd/dvd).

Lynis assists auditors in performing Basel II, GLBA, HIPAA, PCI DSS and SOX (Sarbanes-Oxley) compliance audits.

What is Lynis NOT:
– Not a hardening tool: Lynis does not fix things automatically, it reports only (and makes suggestions).

Intended audience:
Security specialists, penetration testers, system auditors, system/network managers.

Examples of audit tests:
– Available authentication methods
– Expired SSL certificates
– Outdated software
– User accounts without password
– Incorrect file permissions
– Firewall auditing

There is a new version of Lynis out now 1.2.8 – Latest release

Advertisements
This entry was posted in Linux, Open source, Security and tagged , , , , , . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s