Lynis: Lynis 3.0.2

Lynis 3.0.2 (2020-12-24)

Added

• AUTH-9284 – Scan for locked user accounts in /etc/passwd
• LOGG-2153 – Loghost configuration
• TOOL-5130 – Check for active Suricata daemon
• OS detection of Flatcar, IPFire, Mageia, NixOS, ROSA Linux, SLES (extended), Void Linux, Zorin OS
• OS detection of OpenIndiana (Hipster and Legacy), Shillix, SmartOS, Tribblix, and others
• EOL dates for Alpine, macOS, Mageia, OmniosCE, and Solaris 11
• Support for Solaris svcs (service manager)
• Enumeration of Solaris services

Changed

• ACCT-9626 – Detect sysstat systemd unit
• AUTH-9230 – Only fail if both SHA_CRYPT_MIN_ROUNDS and SHA_CRYPT_MAX_ROUNDS are undefined
• BOOT-5184 – Support for Solaris
• KRNL-5830 – Improved reboot test by ignoring known bad values
• KRNL-5830 – Ignore rescue kernel such as on CentOS systems
• KRNL-5830 – Detection of Alpine Linux kernel
• NETW-2400 – Compatibility change for hostname check
• NETW-3012 – Support for Solaris
• PKGS-7410 – Don’t show exception if no kernels were found on the disk
• TIME-3185 – Supports now checking files at multiple locations (systemd)
• ParseNginx function: Support include on absolute paths
• ParseNginx function: Ignore empty included wildcards
• Set ‘RHEL’ as OS_NAME for Red Hat Enterprise Linux
• HostID: Use first e1000 interface and break after match
• Translations extended and updated
• Test if pgrep exists before using it
• Better support for busybox shell
• Small code enhancements