Install Lynis
Product Name: Lynis
Product Version: 1.2.9
Homepage: http://www.rootkit.nl/projects/lynis.html
Description: Lynis is an auditing tool for Unix (specialists). It scans the system and available software, to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes.
This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems. It can be run without prior installation, so inclusion on read only storage is no problem (USB stick, cd/dvd).
Lynis assists auditors in performing Basel II, GLBA, HIPAA, PCI DSS and SOX (Sarbanes-Oxley) compliance audits.
What is Lynis NOT:
- Not a hardening tool: Lynis does not fix things automatically, it reports only (and makes suggestions).
Step 1: Download and prepare lynis
cd /usr/local/src wget http://www.rootkit.nl/files/lynis-1.2.9.tar.gz tar -zxvf lynis-1.2.9.tar.gz cd lynis-1.2.9 ./lynis --check-update
Step 2: Run a full system check
./lynis -c -Q