Today I learned about «Lynis», an agentless security auditing tool for *nix-based systems, that lets you do compliance testing e.g. for HIPAA or SOX, pen testing, vulnerability detection to help you harden systems. I ran it and it appears to work well and returns useful suggestions after it runs, e.g. install this, disable that, confirm the other. 🤖
This is what the first few lines of the results look like:
[+] System Tools
------------------------------------
- Scanning available tools...
- Checking system binaries...
[+] Program Details
------------------------------------
- Verbose mode [ YES ] - Debug mode [ NO ][+] Plugins (phase 1)------------------------------------
Note: plugins have more extensive tests and may take several minutes to complete - Plugins enabled [ NONE ][+] Boot and services
------------------------------------
- Service Manager [ launchd ] - Boot loader [ NONE FOUND ][+] Kernel
------------------------------------
...
(via @binitamshah on Twitter)
RC Logr 20190408 145501 - Today I learned about «Lynis», …Rick CogleyBack to HomeTweet Link