-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathlynis-98.log
4079 lines (4079 loc) · 278 KB
/
lynis-98.log
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
2020-06-23 18:41:29 Starting Lynis 3.0.0 with PID 30136, build date 2020-03-20
2020-06-23 18:41:29 ====
2020-06-23 18:41:29 ### 2007-2020, CISOfy - https://cisofy.com/lynis/ ###
2020-06-23 18:41:29 Checking permissions of /usr/share/lynis/include/profiles
2020-06-23 18:41:29 File permissions are OK
2020-06-23 18:41:29 Reading profile/configuration /etc/lynis/default.prf
2020-06-23 18:41:29 Action: created temporary file /tmp/lynis.sVxHWrfwpY
2020-06-23 18:41:29 Language set via profile to ''
2020-06-23 18:41:29 Plugin 'authentication' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'compliance' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'configuration' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'control-panels' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'crypto' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'dns' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'docker' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'file-integrity' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'file-systems' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'firewalls' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'forensics' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'hardware' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'intrusion-detection' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'intrusion-prevention' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'kernel' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'malware' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'memory' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'nginx' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'pam' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'processes' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'security-modules' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'software' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'system-integrity' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'systemd' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:29 Plugin 'users' enabled according profile (/etc/lynis/default.prf)
2020-06-23 18:41:30 Reading profile/configuration /etc/lynis/custom.prf
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.USUtxt3r6p
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.Wl5DMATKMO
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.UT06Oly04D
2020-06-23 18:41:30 Language set via profile to ''
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.FhxGdYRJf9
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.4HGu1BoLmf
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.5eGrnwcZDy
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.7T26hGpKXB
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.Mzw39rHb4O
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.UBGXtz1ttN
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.uU9CLHtTgh
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.cN3OrxVca9
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.lZtiwIzNeS
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.LlG1HgG3Uf
2020-06-23 18:41:30 Action: created temporary file /tmp/lynis.LYlaWRiAUz
2020-06-23 18:41:30 Plugin 'authentication' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'compliance' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'configuration' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'control-panels' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'crypto' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'dns' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'docker' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'file-integrity' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'file-systems' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'firewalls' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'forensics' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'hardware' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'intrusion-detection' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'intrusion-prevention' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'kernel' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'malware' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'memory' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'nginx' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'pam' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'processes' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'security-modules' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'software' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'system-integrity' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'systemd' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:30 Plugin 'users' enabled according profile (/etc/lynis/custom.prf)
2020-06-23 18:41:31 Action: created temporary file /tmp/lynis.PlmBQgNXEY
2020-06-23 18:41:31 Action: created temporary file /tmp/lynis.YC5IfzUYw7
2020-06-23 18:41:31 Action: created temporary file /tmp/lynis.ZYLG7vaSM1
2020-06-23 18:41:31 Action: created temporary file /tmp/lynis.MSZbQsGDco
2020-06-23 18:41:31 Skip tests: AUTH-9408 PKGS-7420 NETW-2705 SSH-7408:PORT LOGG-2154 ACCT-9622 FINT-4350 TOOL-5190 MALW-3280 HRDN-7230
2020-06-23 18:41:31 Set option to default value: NTPD_ROLE --> client
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 EOL check: 255
2020-06-23 18:41:31 Note: the end-of-life of 'Fedora CoreOS 32.20200601.3.0' could not be checked. Entry missing in software-eol.db?
2020-06-23 18:41:31 Program version: 3.0.0
2020-06-23 18:41:31 Operating system: Linux
2020-06-23 18:41:31 Operating system name: Fedora Linux
2020-06-23 18:41:31 Operating system version: 32
2020-06-23 18:41:31 Kernel version: 5.6.14
2020-06-23 18:41:31 Kernel version (full): 5.6.14-300.fc32.x86_64
2020-06-23 18:41:31 Hardware platform: x86_64
2020-06-23 18:41:31 -----------------------------------------------------
2020-06-23 18:41:31 Hostname: ip-172-20-42-84
2020-06-23 18:41:31 Auditor: [Not Specified]
2020-06-23 18:41:31 Profiles: /etc/lynis/default.prf /etc/lynis/custom.prf
2020-06-23 18:41:31 Work directory: /var/home/core
2020-06-23 18:41:31 Include directory: /usr/share/lynis/include
2020-06-23 18:41:31 Plugin directory: /usr/share/lynis/plugins
2020-06-23 18:41:31 -----------------------------------------------------
2020-06-23 18:41:31 Log file: /var/log/lynis.log
2020-06-23 18:41:31 Report file: /var/log/lynis-report.dat
2020-06-23 18:41:31 Report version: 1.0
2020-06-23 18:41:31 -----------------------------------------------------
2020-06-23 18:41:31 Test category: all
2020-06-23 18:41:31 Test group: all
2020-06-23 18:41:31 BusyBox used: 0
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 Test: Checking for program update...
2020-06-23 18:41:31 Current installed version : 300
2020-06-23 18:41:31 Latest stable version : 300
2020-06-23 18:41:31 No Lynis update available.
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 Checking permissions of /usr/share/lynis/include/binaries
2020-06-23 18:41:31 File permissions are OK
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 Action: Performing tests from category: System Tools
2020-06-23 18:41:31 Start scanning for available audit binaries and tools...
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 Performing test ID CORE-1000 (Check all system binaries)
2020-06-23 18:41:31 Status: Starting binary scan...
2020-06-23 18:41:31 Test: Checking binaries in directory /bin
2020-06-23 18:41:31 Result: directory exists, but is actually a symlink
2020-06-23 18:41:31 Action: checking symlink for file /bin
2020-06-23 18:41:31 Setting temporary readlinkbinary variable
2020-06-23 18:41:31 Note: Using real readlink binary to determine symlink on /bin
2020-06-23 18:41:31 Result: readlink shows /usr/bin as output
2020-06-23 18:41:31 Result: symlink found, pointing to directory /usr/bin
2020-06-23 18:41:31 Result: found the path behind this symlink (/bin --> /usr/bin)
2020-06-23 18:41:31 Directory /usr/bin exists. Starting directory scanning...
2020-06-23 18:41:31 Found known binary: awk (string tool) - /usr/bin/awk
2020-06-23 18:41:31 Found known binary: base64 (encoding tool) - /usr/bin/base64
2020-06-23 18:41:31 Found known binary: bootctl (systemd-boot manager utility) - /usr/bin/bootctl
2020-06-23 18:41:31 Found known binary: cat (generic file handling) - /usr/bin/cat
2020-06-23 18:41:31 Found known binary: comm (file compare) - /usr/bin/comm
2020-06-23 18:41:31 Found known binary: curl (browser, download utility) - /usr/bin/curl
2020-06-23 18:41:31 Found known binary: cut (text stream editor) - /usr/bin/cut
2020-06-23 18:41:31 Found known binary: dig (network/dns tool) - /usr/bin/dig
2020-06-23 18:41:31 Found known binary: dnsdomainname (DNS domain) - /usr/bin/dnsdomainname
2020-06-23 18:41:31 Found known binary: docker (container technology) - /usr/bin/docker
2020-06-23 18:41:31 Found known binary: domainname (NIS domain) - /usr/bin/domainname
2020-06-23 18:41:31 Found known binary: egrep (text search) - /usr/bin/egrep
2020-06-23 18:41:31 Found known binary: file (file type detection) - /usr/bin/file
2020-06-23 18:41:31 Found known binary: find (search tool) - /usr/bin/find
2020-06-23 18:41:31 Found known binary: getent (query tool for name service switch libraries) - /usr/bin/getent
2020-06-23 18:41:31 Found known binary: grep (text search) - /usr/bin/grep
2020-06-23 18:41:31 Found known binary: gzip (compressing utility) - /usr/bin/gzip
2020-06-23 18:41:31 Found known binary: head (text filter) - /usr/bin/head
2020-06-23 18:41:31 Found known binary: journalctl (systemd journal) - /usr/bin/journalctl
2020-06-23 18:41:31 Found known binary: ls (file listing) - /usr/bin/ls
2020-06-23 18:41:31 Found known binary: lsattr (file attributes) - /usr/bin/lsattr
2020-06-23 18:41:31 Found known binary: lsblk (block devices) - /usr/bin/lsblk
2020-06-23 18:41:31 Found known binary: lsof (open files) - /usr/bin/lsof
2020-06-23 18:41:31 Note: added -K i to ignore tasks on Linux
2020-06-23 18:41:31 Found known binary: md5sum (hash tool) - /usr/bin/md5sum
2020-06-23 18:41:31 Found known binary: mount (disk utility) - /usr/bin/mount
2020-06-23 18:41:31 Found known binary: netstat (network statistics) - /usr/bin/netstat
2020-06-23 18:41:31 Found /usr/bin/openssl (version 1.1.1g)
2020-06-23 18:41:31 Found /usr/bin/perl (version 5.30.3)
2020-06-23 18:41:31 Found known binary: pgrep (search in process list) - /usr/bin/pgrep
2020-06-23 18:41:31 Found known binary: ps (process listing) - /usr/bin/ps
2020-06-23 18:41:31 Found known binary: python (programming language interpreter) - /usr/bin/python (version 3.8.3)
2020-06-23 18:41:31 Found known binary: python3 (programming language interpreter) - /usr/bin/python3 (version 3.8.3)
2020-06-23 18:41:31 Found known binary: readlink (follows symlinks) - /usr/bin/readlink
2020-06-23 18:41:31 Found known binary: resolvectl (systemd-resolved DNS resolver manager) - /usr/bin/resolvectl
2020-06-23 18:41:31 Found known binary: rpcinfo (RPC information) - /usr/bin/rpcinfo
2020-06-23 18:41:31 Found known binary: rpm (package manager) - /usr/bin/rpm
2020-06-23 18:41:31 Found known binary: sed (text stream editor) - /usr/bin/sed
2020-06-23 18:41:31 Found known binary: sha1/sha1sum/shasum (crypto hashing) - /usr/bin/sha1sum
2020-06-23 18:41:31 Found known binary: sha256/sha256sum (crypto hashing) - /usr/bin/sha256sum
2020-06-23 18:41:31 Found known binary: sort (sort data streams) - /usr/bin/sort
2020-06-23 18:41:31 Found known binary: ssh-keyscan (scanner for SSH keys) - /usr/bin/ssh-keyscan
2020-06-23 18:41:31 Found known binary: stat (file information) - /usr/bin/stat
2020-06-23 18:41:31 Found known binary: systemctl (client to systemd) - /usr/bin/systemctl
2020-06-23 18:41:31 Found known binary: systemd-analyze (systemd service analysis tool) - /usr/bin/systemd-analyze
2020-06-23 18:41:31 Found known binary: tail (text filter) - /usr/bin/tail
2020-06-23 18:41:31 Found known binary: timedatectl (timedate client) - /usr/bin/timedatectl
2020-06-23 18:41:31 Found known binary: tr (text transformation) - /usr/bin/tr
2020-06-23 18:41:31 Found known binary: uname (operating system details) - /usr/bin/uname
2020-06-23 18:41:31 Found known binary: uniq (text manipulation utility) - /usr/bin/uniq
2020-06-23 18:41:31 Found known binary: usbguard (USB security tool) - /usr/bin/usbguard
2020-06-23 18:41:31 Found known binary: wc (word count) - /usr/bin/wc
2020-06-23 18:41:31 Found known binary: xargs (command output redirection) - /usr/bin/xargs
2020-06-23 18:41:31 Found known binary: zgrep (text search for compressed files) - /usr/bin/zgrep
2020-06-23 18:41:31 Test: Checking binaries in directory /sbin
2020-06-23 18:41:31 Result: directory exists, but is actually a symlink
2020-06-23 18:41:31 Action: checking symlink for file /sbin
2020-06-23 18:41:31 Note: Using real readlink binary to determine symlink on /sbin
2020-06-23 18:41:31 Result: readlink shows /usr/sbin as output
2020-06-23 18:41:31 Result: symlink found, pointing to directory /usr/sbin
2020-06-23 18:41:31 Result: found the path behind this symlink (/sbin --> /usr/sbin)
2020-06-23 18:41:31 Directory /usr/sbin exists. Starting directory scanning...
2020-06-23 18:41:31 Found known binary: auditctl (control utility for audit daemon) - /usr/sbin/auditctl
2020-06-23 18:41:31 Found known binary: auditd (audit framework) - /usr/sbin/auditd
2020-06-23 18:41:31 Found known binary: blkid (information about block devices) - /usr/sbin/blkid
2020-06-23 18:41:31 Found known binary: cryptsetup (block device encryption) - /usr/sbin/cryptsetup
2020-06-23 18:41:31 Found known binary: getcap (kernel capabilities) - /usr/sbin/getcap
2020-06-23 18:41:31 Found known binary: grpck (consistency checker) - /usr/sbin/grpck
2020-06-23 18:41:31 Found known binary: grub2-install (installer for boot loader) - /usr/sbin/grub2-install
2020-06-23 18:41:31 Found known binary: ipconfig (IP configuration) - /usr/sbin/ifconfig
2020-06-23 18:41:31 Found known binary: ip (IP configuration) - /usr/sbin/ip
2020-06-23 18:41:31 Found known binary: iptables (firewall) - /usr/sbin/iptables
2020-06-23 18:41:31 Found known binary: iptables-save (firewall) - /usr/sbin/iptables-save
2020-06-23 18:41:31 Found known binary: logrotate (log rotation tool) - /usr/sbin/logrotate
2020-06-23 18:41:31 Found known binary: lsmod (kernel modules) - /usr/sbin/lsmod
2020-06-23 18:41:31 Found known binary: lvdisplay (LVM tool) - /usr/sbin/lvdisplay
2020-06-23 18:41:31 Found known binary: modprobe (kernel modules) - /usr/sbin/modprobe
2020-06-23 18:41:31 Found known binary: nft (nftables client) - /usr/sbin/nft
2020-06-23 18:41:31 Found known binary: rpcinfo (RPC information) - /usr/sbin/rpcinfo
2020-06-23 18:41:31 Found known binary: runlevel (system utility) - /usr/sbin/runlevel
2020-06-23 18:41:31 Found known binary: semanage (SELinux policy management tool) - /usr/sbin/semanage
2020-06-23 18:41:31 Found known binary: service (system services) - /usr/sbin/service
2020-06-23 18:41:31 Found known binary: sestatus (SELinux status tool) - /usr/sbin/sestatus
2020-06-23 18:41:31 Found known binary: showmount (NFS mounts) - /usr/sbin/showmount
2020-06-23 18:41:31 Found known binary: ss (show sockets) - /usr/sbin/ss
2020-06-23 18:41:31 Found /usr/sbin/sshd (version 8.3)
2020-06-23 18:41:31 Found known binary: swapon (swap device tool) - /usr/sbin/swapon
2020-06-23 18:41:31 Found known binary: sysctl (kernel parameters) - /usr/sbin/sysctl
2020-06-23 18:41:31 Found known binary: tune2fs (file system tool) - /usr/sbin/tune2fs
2020-06-23 18:41:31 Found known binary: vgdisplay (LVM tool) - /usr/sbin/vgdisplay
2020-06-23 18:41:31 Test: Checking binaries in directory /usr/bin
2020-06-23 18:41:31 Result: Skipping this directory as it was already scanned
2020-06-23 18:41:31 Result: Directory /usr/bin skipped
2020-06-23 18:41:31 Test: Checking binaries in directory /usr/sbin
2020-06-23 18:41:31 Result: Skipping this directory as it was already scanned
2020-06-23 18:41:31 Result: Directory /usr/sbin skipped
2020-06-23 18:41:31 Test: Checking binaries in directory /usr/local/bin
2020-06-23 18:41:31 Directory /usr/local/bin exists. Starting directory scanning...
2020-06-23 18:41:31 Test: Checking binaries in directory /usr/local/sbin
2020-06-23 18:41:31 Directory /usr/local/sbin exists. Starting directory scanning...
2020-06-23 18:41:31 Discovered directories: /usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin
2020-06-23 18:41:31 Result: found 1501 binaries including 20 set-uid and 1 set-gid
2020-06-23 18:41:31 Result: set-uid binaries: /usr/bin/chage /usr/bin/fusermount /usr/bin/fusermount3 /usr/bin/gpasswd /usr/bin/mount /usr/bin/newgrp /usr/bin/passwd /usr/bin/pkexec /usr/bin/sg /usr/bin/su /usr/bin/sudo /usr/bin/sudoedit /usr/bin/umount /usr/sbin/grub2-set-bootflag /usr/sbin/mount.nfs /usr/sbin/mount.nfs4 /usr/sbin/pam_timestamp_check /usr/sbin/umount.nfs /usr/sbin/umount.nfs4 /usr/sbin/unix_chkpwd
2020-06-23 18:41:31 Result: set-gid binaries: /usr/bin/write
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 Informational: package manager is used
2020-06-23 18:41:31 Test: Determine if this system is a virtual machine
2020-06-23 18:41:31 Result: facter utility not found
2020-06-23 18:41:31 Test: trying to guess virtualization technology with systemd-detect-virt
2020-06-23 18:41:31 Result: found kvm
2020-06-23 18:41:31 Result: skipped lscpu test, as we already found machine type
2020-06-23 18:41:31 Result: skipped dmidecode test, as we already found machine type
2020-06-23 18:41:31 Result: skipped processes test, as we already found platform
2020-06-23 18:41:31 Result: skipped Amazon EC2 test, as we already found platform
2020-06-23 18:41:31 Result: skipped sysctl test, as we already found platform
2020-06-23 18:41:31 Result: skipped lshw test, as we already found machine type
2020-06-23 18:41:31 Result: found virtual machine (type: kvm, KVM)
2020-06-23 18:41:31 Result: Lynis is not running in container
2020-06-23 18:41:31 Result: system is using systemd
2020-06-23 18:41:31 ====
2020-06-23 18:41:31 Action: Performing plugin tests
2020-06-23 18:41:31 Searching plugins...
2020-06-23 18:41:31 Result: Found 0 plugins of which 0 are enabled
2020-06-23 18:41:31 Result: Plugins phase 1 finished
2020-06-23 18:41:31 ====
2020-06-23 18:41:32 Info: using hardware address 02:ee:e9:4d:d4:c5 to create ID
2020-06-23 18:41:32 Result: Found HostID: 5244d14e9577f7edd529ba5e8176efbb467b01fc
2020-06-23 18:41:32 Info: creating a HostID (version 2)
2020-06-23 18:41:32 Result: found file ssh_host_ed25519_key.pub in /etc/ssh, using that to create host identifier
2020-06-23 18:41:32 Using SSH public key to create the second host identifier
2020-06-23 18:41:32 Hash (hostname): d983045efbfd0a02fc28bb5d78ae67b7f411275158422ab6756ccebb3340553a
2020-06-23 18:41:32 Hash (ssh or machineid): 2fe2c368a0e13986cc996e4e8bff24d71edfd02b93d75f94b340b91784d4b0d6
2020-06-23 18:41:32 Info: found valid HostID 5244d14e9577f7edd529ba5e8176efbb467b01fc
2020-06-23 18:41:32 Info: no machine ID found
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Info: perform tests from all categories
2020-06-23 18:41:32 Security check: file is normal
2020-06-23 18:41:32 Checking permissions of /usr/share/lynis/include/tests_boot_services
2020-06-23 18:41:32 File permissions are OK
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Action: Performing tests from category: Boot and services
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5102 (Check for AIX boot device)
2020-06-23 18:41:32 Reason to skip: Incorrect guest OS (AIX only)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5104 (Determine service manager)
2020-06-23 18:41:32 Result: cmdline found = /usr/lib/systemd/systemd --switched-root --system --deserialize 28
2020-06-23 18:41:32 Result: file on disk = /usr/lib/systemd/systemd
2020-06-23 18:41:32 Found: systemd
2020-06-23 18:41:32 Result: service manager found = systemd
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5106 (Check EFI boot file on Mac OS X/macOS)
2020-06-23 18:41:32 Reason to skip: Incorrect guest OS (macOS only)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5108 (Check Syslinux as bootloader)
2020-06-23 18:41:32 Test: checking if file /boot/syslinux/syslinux.cfg exists
2020-06-23 18:41:32 Result: file /boot/syslinux/syslinux.cfg NOT found
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5109 (Check rEFInd as bootloader)
2020-06-23 18:41:32 Test: checking if file /boot/refind_linux.conf exists
2020-06-23 18:41:32 Result: file /boot/refind_linux.conf NOT found
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5116 (Check if system is booted in UEFI mode)
2020-06-23 18:41:32 Test: checking if UEFI is used
2020-06-23 18:41:32 Result: UEFI not used, can't find /sys/firmware/efi directory
2020-06-23 18:41:32 Test: determine if Secure Boot is used
2020-06-23 18:41:32 Result: system not booted with Secure Boot (no SecureBoot file found)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5117 (Check for systemd-boot bootloader presence)
2020-06-23 18:41:32 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5121 (Check for GRUB boot loader presence)
2020-06-23 18:41:32 Test: Checking for presence GRUB conf file (/boot/grub/grub.conf or /boot/grub/menu.lst)
2020-06-23 18:41:32 Result: found GRUB2 configuration file (/boot/grub2/grub.cfg)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5122 (Check for GRUB boot password)
2020-06-23 18:41:32 Found file /boot/grub2/grub.cfg, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /boot/grub2/grub.cfg (escaped: /boot/grub2/grub.cfg)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /boot/grub2/grub.cfg is readable (or directory accessible).
2020-06-23 18:41:32 Result: File '/boot/grub/custom.cfg' does not exist
2020-06-23 18:41:32 Found file /etc/grub.d/00_header, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/00_header (escaped: /etc/grub.d/00_header)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/00_header is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Found file /etc/grub.d/01_users, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/01_users (escaped: /etc/grub.d/01_users)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/01_users is readable (or directory accessible).
2020-06-23 18:41:32 Found file /etc/grub.d/10_linux, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/10_linux (escaped: /etc/grub.d/10_linux)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/10_linux is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Found file /etc/grub.d/20_linux_xen, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/20_linux_xen (escaped: /etc/grub.d/20_linux_xen)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/20_linux_xen is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Found file /etc/grub.d/20_ppc_terminfo, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/20_ppc_terminfo (escaped: /etc/grub.d/20_ppc_terminfo)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/20_ppc_terminfo is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Found file /etc/grub.d/30_os-prober, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/30_os-prober (escaped: /etc/grub.d/30_os-prober)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/30_os-prober is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Found file /etc/grub.d/30_uefi-firmware, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/30_uefi-firmware (escaped: /etc/grub.d/30_uefi-firmware)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/30_uefi-firmware is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Found file /etc/grub.d/40_custom, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/40_custom (escaped: /etc/grub.d/40_custom)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/40_custom is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Found file /etc/grub.d/41_custom, proceeding with tests.
2020-06-23 18:41:32 Test: check if we can access /etc/grub.d/41_custom (escaped: /etc/grub.d/41_custom)
2020-06-23 18:41:32 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:32 Result: file /etc/grub.d/41_custom is readable (or directory accessible).
2020-06-23 18:41:32 Result: did not find hashed password line in this file
2020-06-23 18:41:32 Result: GRUB has password protection.
2020-06-23 18:41:32 Hardening: assigned maximum number of hardening points for this item (4). Currently having 4 points (out of 4)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5124 (Check for FreeBSD boot loader presence)
2020-06-23 18:41:32 Reason to skip: Incorrect guest OS (FreeBSD only)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5261 (Check for DragonFly boot loader presence)
2020-06-23 18:41:32 Reason to skip: Incorrect guest OS (DragonFly only)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5126 (Check for NetBSD boot loader presence)
2020-06-23 18:41:32 Reason to skip: Incorrect guest OS (NetBSD only)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5139 (Check for LILO boot loader presence)
2020-06-23 18:41:32 Test: checking for presence LILO configuration file
2020-06-23 18:41:32 Result: LILO configuration file not found
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5142 (Check SPARC Improved boot loader (SILO))
2020-06-23 18:41:32 Result: no SILO configuration file found.
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5155 (Check for YABOOT boot loader configuration file)
2020-06-23 18:41:32 Test: Check for /etc/yaboot.conf
2020-06-23 18:41:32 Result: no YABOOT configuration file found.
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5159 (Check for OpenBSD boot loader presence)
2020-06-23 18:41:32 Reason to skip: Incorrect guest OS (OpenBSD only)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Skipped test BOOT-5165 (Check for FreeBSD boot services)
2020-06-23 18:41:32 Reason to skip: Incorrect guest OS (FreeBSD only)
2020-06-23 18:41:32 ====
2020-06-23 18:41:32 Performing test ID BOOT-5177 (Check for Linux boot and running services)
2020-06-23 18:41:32 Test: checking presence systemctl binary
2020-06-23 18:41:32 Result: systemctl binary found, trying that to discover information
2020-06-23 18:41:32 Searching for running services (systemctl services only)
2020-06-23 18:41:32 Found running service: auditd
2020-06-23 18:41:32 Found running service: chronyd
2020-06-23 18:41:32 Found running service: dbus-broker
2020-06-23 18:41:32 Found running service: docker
2020-06-23 18:41:32 Found running service: getty@tty1
2020-06-23 18:41:32 Found running service: NetworkManager
2020-06-23 18:41:32 Found running service: serial-getty@ttyS0
2020-06-23 18:41:32 Found running service: sshd
2020-06-23 18:41:32 Found running service: sssd
2020-06-23 18:41:32 Found running service: systemd-homed
2020-06-23 18:41:32 Found running service: systemd-journald
2020-06-23 18:41:32 Found running service: systemd-logind
2020-06-23 18:41:32 Found running service: systemd-udevd
2020-06-23 18:41:32 Found running service: systemd-userdbd
2020-06-23 18:41:32 Found running service: user@1000
2020-06-23 18:41:32 Hint: Run systemctl --full --type=service to see all services
2020-06-23 18:41:32 Result: Found 15 running services
2020-06-23 18:41:32 Searching for enabled services (systemctl services only)
2020-06-23 18:41:33 Found enabled service at boot: NetworkManager-dispatcher
2020-06-23 18:41:33 Found enabled service at boot: NetworkManager-wait-online
2020-06-23 18:41:33 Found enabled service at boot: NetworkManager
2020-06-23 18:41:33 Found enabled service at boot: afterburn-checkin
2020-06-23 18:41:33 Found enabled service at boot: afterburn-firstboot-checkin
2020-06-23 18:41:33 Found enabled service at boot: afterburn-sshkeys@
2020-06-23 18:41:33 Found enabled service at boot: auditd
2020-06-23 18:41:33 Found enabled service at boot: autovt@
2020-06-23 18:41:33 Found enabled service at boot: chronyd
2020-06-23 18:41:33 Found enabled service at boot: console-login-helper-messages-issuegen
2020-06-23 18:41:33 Found enabled service at boot: console-login-helper-messages-motdgen
2020-06-23 18:41:33 Found enabled service at boot: coreos-check-ignition-config
2020-06-23 18:41:33 Found enabled service at boot: coreos-check-ssh-keys
2020-06-23 18:41:33 Found enabled service at boot: coreos-liveiso-success
2020-06-23 18:41:33 Found enabled service at boot: coreos-update-ca-trust
2020-06-23 18:41:33 Found enabled service at boot: dbus-broker
2020-06-23 18:41:33 Found enabled service at boot: dbus-org.freedesktop.nm-dispatcher
2020-06-23 18:41:33 Found enabled service at boot: dbus
2020-06-23 18:41:33 Found enabled service at boot: dbxtool
2020-06-23 18:41:33 Found enabled service at boot: docker
2020-06-23 18:41:33 Found enabled service at boot: fedora-coreos-pinger
2020-06-23 18:41:33 Found enabled service at boot: getty@
2020-06-23 18:41:33 Found enabled service at boot: hidepid
2020-06-23 18:41:33 Found enabled service at boot: ignition-firstboot-complete
2020-06-23 18:41:33 Found enabled service at boot: import-state
2020-06-23 18:41:33 Found enabled service at boot: irqbalance
2020-06-23 18:41:33 Found enabled service at boot: lvm2-monitor
2020-06-23 18:41:33 Found enabled service at boot: mdmonitor
2020-06-23 18:41:33 Found enabled service at boot: multipathd
2020-06-23 18:41:33 Found enabled service at boot: ostree-remount
2020-06-23 18:41:33 Found enabled service at boot: selinux-autorelabel-mark
2020-06-23 18:41:33 Found enabled service at boot: sshd
2020-06-23 18:41:33 Found enabled service at boot: sssd
2020-06-23 18:41:33 Found enabled service at boot: systemd-pstore
2020-06-23 18:41:33 Hint: Run systemctl list-unit-files --type=service to see all services
2020-06-23 18:41:33 Result: Found 34 enabled services
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test BOOT-5180 (Check for Linux boot services (Debian style))
2020-06-23 18:41:33 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID BOOT-5184 (Check permissions for boot files/scripts)
2020-06-23 18:41:33 Result: checking /etc/init.d scripts for writable bit
2020-06-23 18:41:33 Test: checking if directory /etc/init.d exists
2020-06-23 18:41:33 Result: directory /etc/init.d found
2020-06-23 18:41:33 Test: checking for available files in directory
2020-06-23 18:41:33 Result: found no files in directory.
2020-06-23 18:41:33 Test: checking if directory /etc/rc.d exists
2020-06-23 18:41:33 Result: directory /etc/rc.d found
2020-06-23 18:41:33 Test: checking for available files in directory
2020-06-23 18:41:33 Result: found files in directory, checking permissions now
2020-06-23 18:41:33 Test: checking permissions of file /etc/rc.d/init.d/README
2020-06-23 18:41:33 Result: good, file /etc/rc.d/init.d/README not world writable
2020-06-23 18:41:33 Test: checking permissions of file /etc/rc.d/init.d/functions
2020-06-23 18:41:33 Result: good, file /etc/rc.d/init.d/functions not world writable
2020-06-23 18:41:33 Test: checking if directory /etc/rcS.d exists
2020-06-23 18:41:33 Result: directory /etc/rcS.d not found. Skipping..
2020-06-23 18:41:33 Test: Checking /etc/rc0.d scripts for writable bit
2020-06-23 18:41:33 Test: Checking /etc/rc1.d scripts for writable bit
2020-06-23 18:41:33 Test: Checking /etc/rc2.d scripts for writable bit
2020-06-23 18:41:33 Test: Checking /etc/rc3.d scripts for writable bit
2020-06-23 18:41:33 Test: Checking /etc/rc4.d scripts for writable bit
2020-06-23 18:41:33 Test: Checking /etc/rc5.d scripts for writable bit
2020-06-23 18:41:33 Test: Checking /etc/rc6.d scripts for writable bit
2020-06-23 18:41:33 Hardening: assigned maximum number of hardening points for this item (3). Currently having 7 points (out of 7)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID BOOT-5202 (Check uptime of system)
2020-06-23 18:41:33 Uptime (in seconds): 500
2020-06-23 18:41:33 Uptime (in days): 0
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID BOOT-5260 (Check single user mode for systemd)
2020-06-23 18:41:33 Test: Searching /usr/lib/systemd/system/rescue.service
2020-06-23 18:41:33 Result: file /usr/lib/systemd/system/rescue.service
2020-06-23 18:41:33 Test: checking presence sulogin for single user mode
2020-06-23 18:41:33 Result: found sulogin, so single user is protected
2020-06-23 18:41:33 Hardening: assigned maximum number of hardening points for this item (3). Currently having 10 points (out of 10)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test BOOT-5262 (Check for OpenBSD boot daemons)
2020-06-23 18:41:33 Reason to skip: Incorrect guest OS (OpenBSD only)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test BOOT-5263 (Check permissions for boot files/scripts)
2020-06-23 18:41:33 Reason to skip: Incorrect guest OS (OpenBSD only)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID BOOT-5264 (Run systemd-analyze security)
2020-06-23 18:41:33 Test: Run systemd-analyze security
2020-06-23 18:41:33 Result: NetworkManager.service: 7.8 EXPOSED
2020-06-23 18:41:33 Result: auditd.service: 8.7 EXPOSED
2020-06-23 18:41:33 Result: chronyd.service: 8.9 EXPOSED
2020-06-23 18:41:33 Result: coreos-liveiso-success.service: 9.6 UNSAFE
2020-06-23 18:41:33 Result: dbus-broker.service: 8.7 EXPOSED
2020-06-23 18:41:33 Result: dbxtool.service: 9.6 UNSAFE
2020-06-23 18:41:33 Result: dm-event.service: 9.5 UNSAFE
2020-06-23 18:41:33 Result: docker.service: 9.6 UNSAFE
2020-06-23 18:41:33 Result: emergency.service: 9.5 UNSAFE
2020-06-23 18:41:33 Result: [email protected]: 9.6 UNSAFE
2020-06-23 18:41:33 Result: irqbalance.service: 9.6 UNSAFE
2020-06-23 18:41:33 Result: iscsid.service: 9.5 UNSAFE
2020-06-23 18:41:33 Result: iscsiuio.service: 9.5 UNSAFE
2020-06-23 18:41:33 Result: lvm2-lvmpolld.service: 9.5 UNSAFE
2020-06-23 18:41:33 Result: mdmonitor.service: 9.6 UNSAFE
2020-06-23 18:41:33 Result: multipathd.service: 9.5 UNSAFE
2020-06-23 18:41:33 Result: rc-local.service: 9.6 UNSAFE
2020-06-23 18:41:33 Result: rescue.service: 9.5 UNSAFE
2020-06-23 18:41:33 Result: [email protected]: 9.6 UNSAFE
2020-06-23 18:41:33 Result: sshd.service: 9.6 UNSAFE
2020-06-23 18:41:33 Result: sssd.service: 8.3 EXPOSED
2020-06-23 18:41:33 Result: systemd-ask-password-console.service: 9.3 UNSAFE
2020-06-23 18:41:33 Result: systemd-ask-password-wall.service: 9.4 UNSAFE
2020-06-23 18:41:33 Result: [email protected]: 3.2 OK
2020-06-23 18:41:33 Result: systemd-homed.service: 4.5 OK
2020-06-23 18:41:33 Result: systemd-initctl.service: 9.3 UNSAFE
2020-06-23 18:41:33 Result: systemd-journald.service: 4.4 OK
2020-06-23 18:41:33 Result: systemd-logind.service: 2.8 OK
2020-06-23 18:41:33 Result: systemd-rfkill.service: 9.3 UNSAFE
2020-06-23 18:41:33 Result: systemd-timesyncd.service: 2.1 OK
2020-06-23 18:41:33 Result: systemd-udevd.service: 7.1 MEDIUM
2020-06-23 18:41:33 Result: systemd-userdbd.service: 2.3 OK
2020-06-23 18:41:33 Result: [email protected]: 9.4 UNSAFE
2020-06-23 18:41:33 Suggestion: Consider hardening system services [test:BOOT-5264] [details:Run '/usr/bin/systemd-analyze security SERVICE' for each service] [solution:-]
2020-06-23 18:41:33 Security check: file is normal
2020-06-23 18:41:33 Checking permissions of /usr/share/lynis/include/tests_kernel
2020-06-23 18:41:33 File permissions are OK
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Action: Performing tests from category: Kernel
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5622 (Determine Linux default run level)
2020-06-23 18:41:33 Test: Checking for systemd default.target
2020-06-23 18:41:33 Result: no systemd found, so trying inittab
2020-06-23 18:41:33 Test: Checking /etc/inittab
2020-06-23 18:41:33 Result: file /etc/inittab found
2020-06-23 18:41:33 Test: Checking default Linux run level
2020-06-23 18:41:33 Result: Can't determine default run level from /etc/inittab
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5677 (Check CPU options and support)
2020-06-23 18:41:33 Test: Checking /proc/cpuinfo
2020-06-23 18:41:33 Result: found /proc/cpuinfo
2020-06-23 18:41:33 Test: Checking CPU options (XD/NX/PAE)
2020-06-23 18:41:33 PAE: Yes
2020-06-23 18:41:33 NX: Yes
2020-06-23 18:41:33 Result: PAE or No eXecute option(s) both found
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5695 (Determine Linux kernel version and release number)
2020-06-23 18:41:33 Result: found kernel release 5.6.14-300.fc32.x86_64
2020-06-23 18:41:33 Result: found kernel version #1 SMP Wed May 20 20:47:32 UTC 2020
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5723 (Determining if Linux kernel is monolithic)
2020-06-23 18:41:33 Test: checking if kernel is monolithic or modular
2020-06-23 18:41:33 Result: Found modular kernel
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5726 (Checking Linux loaded kernel modules)
2020-06-23 18:41:33 Loaded modules according lsmod:
2020-06-23 18:41:33 Loaded module: binfmt_misc
2020-06-23 18:41:33 Loaded module: blake2b_generic
2020-06-23 18:41:33 Loaded module: br_netfilter
2020-06-23 18:41:33 Loaded module: bridge
2020-06-23 18:41:33 Loaded module: btrfs
2020-06-23 18:41:33 Loaded module: crc32_pclmul
2020-06-23 18:41:33 Loaded module: crc32c_intel
2020-06-23 18:41:33 Loaded module: crct10dif_pclmul
2020-06-23 18:41:33 Loaded module: dm_multipath
2020-06-23 18:41:33 Loaded module: drm
2020-06-23 18:41:33 Loaded module: ena
2020-06-23 18:41:33 Loaded module: fat
2020-06-23 18:41:33 Loaded module: fuse
2020-06-23 18:41:33 Loaded module: ghash_clmulni_intel
2020-06-23 18:41:33 Loaded module: i2c_piix4
2020-06-23 18:41:33 Loaded module: inet_diag
2020-06-23 18:41:33 Loaded module: intel_rapl_common
2020-06-23 18:41:33 Loaded module: intel_rapl_msr
2020-06-23 18:41:33 Loaded module: intel_rapl_perf
2020-06-23 18:41:33 Loaded module: ip_tables
2020-06-23 18:41:33 Loaded module: iptable_filter
2020-06-23 18:41:33 Loaded module: iptable_nat
2020-06-23 18:41:33 Loaded module: isst_if_common
2020-06-23 18:41:33 Loaded module: libcrc32c
2020-06-23 18:41:33 Loaded module: libnvdimm
2020-06-23 18:41:33 Loaded module: llc
2020-06-23 18:41:33 Loaded module: nf_conntrack
2020-06-23 18:41:33 Loaded module: nf_conntrack_netlink
2020-06-23 18:41:33 Loaded module: nf_defrag_ipv4
2020-06-23 18:41:33 Loaded module: nf_defrag_ipv6
2020-06-23 18:41:33 Loaded module: nf_nat
2020-06-23 18:41:33 Loaded module: nf_tables
2020-06-23 18:41:33 Loaded module: nfit
2020-06-23 18:41:33 Loaded module: nfnetlink
2020-06-23 18:41:33 Loaded module: nvme
2020-06-23 18:41:33 Loaded module: nvme_core
2020-06-23 18:41:33 Loaded module: overlay
2020-06-23 18:41:33 Loaded module: parport
2020-06-23 18:41:33 Loaded module: parport_pc
2020-06-23 18:41:33 Loaded module: ppdev
2020-06-23 18:41:33 Loaded module: raid6_pq
2020-06-23 18:41:33 Loaded module: rfkill
2020-06-23 18:41:33 Loaded module: serio_raw
2020-06-23 18:41:33 Loaded module: stp
2020-06-23 18:41:33 Loaded module: tcp_diag
2020-06-23 18:41:33 Loaded module: udp_diag
2020-06-23 18:41:33 Loaded module: vfat
2020-06-23 18:41:33 Loaded module: xfs
2020-06-23 18:41:33 Loaded module: xor
2020-06-23 18:41:33 Loaded module: xt_MASQUERADE
2020-06-23 18:41:33 Loaded module: xt_addrtype
2020-06-23 18:41:33 Loaded module: xt_conntrack
2020-06-23 18:41:33 Loaded module: zstd_compress
2020-06-23 18:41:33 Loaded module: zstd_decompress
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5728 (Checking Linux kernel config)
2020-06-23 18:41:33 Result: no Linux kernel configuration file found in /boot
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test KRNL-5730 (Checking disk I/O kernel scheduler)
2020-06-23 18:41:33 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test KRNL-5745 (Checking FreeBSD loaded kernel modules)
2020-06-23 18:41:33 Reason to skip: Incorrect guest OS (FreeBSD only)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test KRNL-5831 (Checking DragonFly loaded kernel modules)
2020-06-23 18:41:33 Reason to skip: Incorrect guest OS (DragonFly only)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test KRNL-5770 (Checking active kernel modules)
2020-06-23 18:41:33 Reason to skip: Incorrect guest OS (Solaris only)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Skipped test KRNL-5788 (Checking availability new Linux kernel)
2020-06-23 18:41:33 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5820 (Checking core dumps configuration)
2020-06-23 18:41:33 Test: Checking presence of systemd
2020-06-23 18:41:33 Result: systemd is present on this system
2020-06-23 18:41:33 Test: Checking if core dumps are disabled in /etc/systemd/coredump.conf and /etc/systemd/coredump.conf.d/*.conf
2020-06-23 18:41:33 Result: core dumps are disabled by 'ProcessSizeMax=0' and 'Storage=none' in systemd configuration files
2020-06-23 18:41:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 11 points (out of 11)
2020-06-23 18:41:33 Test: Checking presence /etc/profile
2020-06-23 18:41:33 Test: Checking if 'ulimit -c 0' exists in /etc/profile or /etc/profile.d/*.sh
2020-06-23 18:41:33 Result: core dumps are disabled by 'ulimit -c 0' in /etc/profile or /etc/profile.d/*.sh
2020-06-23 18:41:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 12 points (out of 12)
2020-06-23 18:41:33 Test: Checking presence /etc/security/limits.conf
2020-06-23 18:41:33 Result: file /etc/security/limits.conf exists
2020-06-23 18:41:33 Test: Checking if core dumps are disabled in /etc/security/limits.conf and /etc/security/limits.d/*
2020-06-23 18:41:33 Result: core dumps are hard disabled
2020-06-23 18:41:33 Hardening: assigned maximum number of hardening points for this item (3). Currently having 15 points (out of 15)
2020-06-23 18:41:33 Test: Checking sysctl value of fs.suid_dumpable
2020-06-23 18:41:33 Result: value 0 found
2020-06-23 18:41:33 Result: found default option (0), no execute only program or program with changed privilege levels can dump
2020-06-23 18:41:33 Hardening: assigned maximum number of hardening points for this item (1). Currently having 16 points (out of 16)
2020-06-23 18:41:33 ====
2020-06-23 18:41:33 Performing test ID KRNL-5830 (Checking if system is running on the latest installed kernel)
2020-06-23 18:41:33 Test: Checking presence /var/run/reboot-required.pkgs
2020-06-23 18:41:33 Result: file /var/run/reboot-required.pkgs not found
2020-06-23 18:41:33 Result: /boot exists, performing more tests from here
2020-06-23 18:41:33 Result: /boot/vmlinuz not on disk, trying to find /boot/vmlinuz*
2020-06-23 18:41:33 Result: using 5.6.14.300 as my kernel version (stripped)
2020-06-23 18:41:33 Exception: test has an exceptional event (KRNL-5830:2) with text Can not find any vmlinuz or kernel files in /boot, which is unexpected
2020-06-23 18:41:38 Result: /var/cache/apt/archives/ does not exist
2020-06-23 18:41:39 Security check: file is normal
2020-06-23 18:41:39 Checking permissions of /usr/share/lynis/include/tests_memory_processes
2020-06-23 18:41:39 File permissions are OK
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Action: Performing tests from category: Memory and Processes
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID PROC-3602 (Checking /proc/meminfo for memory details)
2020-06-23 18:41:39 Result: found /proc/meminfo
2020-06-23 18:41:39 Result: Found 3960924 kB memory
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Skipped test PROC-3604 (Query prtconf for memory details)
2020-06-23 18:41:39 Reason to skip: Incorrect guest OS (Solaris only)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID PROC-3612 (Check dead or zombie processes)
2020-06-23 18:41:39 Result: no zombie processes found
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID PROC-3614 (Check heavy IO waiting based processes)
2020-06-23 18:41:39 Result: No processes were waiting for IO requests to be handled first
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID PROC-3802 (Check presence of prelink tooling)
2020-06-23 18:41:39 Result: prelink package is NOT installed
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (3). Currently having 19 points (out of 19)
2020-06-23 18:41:39 Security check: file is normal
2020-06-23 18:41:39 Checking permissions of /usr/share/lynis/include/tests_authentication
2020-06-23 18:41:39 File permissions are OK
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Action: Performing tests from category: Users, Groups and Authentication
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9204 (Check users with an UID of zero)
2020-06-23 18:41:39 Test: Searching accounts with UID 0
2020-06-23 18:41:39 Result: No accounts found with UID 0 other than root.
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9208 (Check non-unique accounts in passwd file)
2020-06-23 18:41:39 Test: Checking for non-unique accounts
2020-06-23 18:41:39 Result: all accounts found in /etc/passwd are unique
2020-06-23 18:41:39 Remarks: Non unique UIDs can be a risk for the system or part of a configuration mistake
2020-06-23 18:41:39 Prerequisite test: /usr/sbin/chkgrp
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Skipped test AUTH-9212 (Test group file)
2020-06-23 18:41:39 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9216 (Check group and shadow group files)
2020-06-23 18:41:39 Test: Checking for grpck binary output
2020-06-23 18:41:39 Result: grpck binary didn't find any errors in the group files
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Skipped test AUTH-9218 (Check login shells for passwordless accounts)
2020-06-23 18:41:39 Reason to skip: Incorrect guest OS (DragonFly FreeBSD NetBSD OpenBSD only)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9222 (Check unique groups (IDs))
2020-06-23 18:41:39 Test: Checking for non unique group ID's in /etc/group
2020-06-23 18:41:39 Result: All group ID's are unique
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9226 (Check unique group names)
2020-06-23 18:41:39 Test: Checking for non unique group names in /etc/group
2020-06-23 18:41:39 Result: All group names are unique
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9228 (Check password file consistency with pwck)
2020-06-23 18:41:39 Test: Checking password file consistency (pwck)
2020-06-23 18:41:39 Result: pwck check didn't find any problems
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (2). Currently having 21 points (out of 21)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9229 (Check password hashing methods)
2020-06-23 18:41:39 Test: Checking password hashing methods
2020-06-23 18:41:39 Result: no poor password hashing methods found
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (2). Currently having 23 points (out of 23)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9230 (Check group password hashing rounds)
2020-06-23 18:41:39 Test: Checking SHA_CRYPT_MIN_ROUNDS option in /etc/login.defs
2020-06-23 18:41:39 Result: number of encryption algorithm rounds is 5000
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (2). Currently having 25 points (out of 25)
2020-06-23 18:41:39 Test: Checking SHA_CRYPT_MAX_ROUNDS option in /etc/login.defs
2020-06-23 18:41:39 Result: number of encryption algorithm rounds is 10000
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (2). Currently having 27 points (out of 27)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9234 (Query user accounts)
2020-06-23 18:41:39 Test: Read system users (including root user) from password database (e.g. /etc/passwd)
2020-06-23 18:41:39 Result: found minimal user id specified: 1000
2020-06-23 18:41:39 Linux real users output (ID = 0, or 1000+, but not 65534):
2020-06-23 18:41:39 Real user: root,0
2020-06-23 18:41:39 Real user: core,1000
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9240 (Query NIS+ authentication support)
2020-06-23 18:41:39 Result: NIS+ authentication not enabled
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9242 (Query NIS authentication support)
2020-06-23 18:41:39 Result: NIS authentication not enabled
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9250 (Checking sudoers file)
2020-06-23 18:41:39 Test: checking presence /etc/sudoers
2020-06-23 18:41:39 Result: found file (/etc/sudoers)
2020-06-23 18:41:39 Test: checking presence /usr/local/etc/sudoers
2020-06-23 18:41:39 Result: file /usr/local/etc/sudoers not found
2020-06-23 18:41:39 Test: checking presence /usr/pkg/etc/sudoers
2020-06-23 18:41:39 Result: file /usr/pkg/etc/sudoers not found
2020-06-23 18:41:39 Result: sudoers file found (/etc/sudoers)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9252 (Check ownership and permissions for sudo configuration files)
2020-06-23 18:41:39 Test: checking drop-in directory (/etc/sudoers.d)
2020-06-23 18:41:39 Result: Found directory permissions: rwxr-x--- and owner UID GID: 00
2020-06-23 18:41:39 Result: directory /etc/sudoers.d permissions OK
2020-06-23 18:41:39 Result: directory /etc/sudoers.d ownership OK
2020-06-23 18:41:39 Test: checking file (/etc/sudoers)
2020-06-23 18:41:39 Result: Found file permissions: r--r----- and owner UID GID: 00
2020-06-23 18:41:39 Result: file /etc/sudoers permissions OK
2020-06-23 18:41:39 Result: file /etc/sudoers ownership OK
2020-06-23 18:41:39 Test: checking file (/etc/sudoers.d/coreos-sudo-group)
2020-06-23 18:41:39 Result: Found file permissions: r--r----- and owner UID GID: 00
2020-06-23 18:41:39 Result: file /etc/sudoers.d/coreos-sudo-group permissions OK
2020-06-23 18:41:39 Result: file /etc/sudoers.d/coreos-sudo-group ownership OK
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Skipped test AUTH-9254 (Solaris passwordless accounts)
2020-06-23 18:41:39 Reason to skip: Incorrect guest OS (Solaris only)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9262 (Checking presence password strength testing tools (PAM))
2020-06-23 18:41:39 Searching PAM password testing modules (cracklib, passwdqc, pwquality)
2020-06-23 18:41:39 Result: found pam_cracklib.so (crack library PAM) in /lib64/security
2020-06-23 18:41:39 Result: found pam_pwquality.so (password quality control PAM) in /lib64/security
2020-06-23 18:41:39 Result: pam_cracklib.so found
2020-06-23 18:41:39 Result: pam_passwdqc.so NOT found (passwd quality control PAM)
2020-06-23 18:41:39 Result: pam_pwquality.so found
2020-06-23 18:41:39 Result: found at least one PAM module for password strength testing
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (3). Currently having 30 points (out of 30)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9264 (Checking presence pam.conf)
2020-06-23 18:41:39 Test: Checking file /etc/pam.conf
2020-06-23 18:41:39 Result: file /etc/pam.conf could not be found
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9266 (Checking presence pam.d files)
2020-06-23 18:41:39 Test: Checking directory /etc/pam.d
2020-06-23 18:41:39 Result: directory /etc/pam.d exists
2020-06-23 18:41:39 Test: searching PAM configuration files
2020-06-23 18:41:39 Found file: /etc/pam.d/config-util
2020-06-23 18:41:39 Found file: /etc/pam.d/fingerprint-auth
2020-06-23 18:41:39 Found file: /etc/pam.d/login
2020-06-23 18:41:39 Found file: /etc/pam.d/other
2020-06-23 18:41:39 Found file: /etc/pam.d/passwd
2020-06-23 18:41:39 Found file: /etc/pam.d/password-auth
2020-06-23 18:41:39 Found file: /etc/pam.d/polkit-1
2020-06-23 18:41:39 Found file: /etc/pam.d/postlogin
2020-06-23 18:41:39 Found file: /etc/pam.d/remote
2020-06-23 18:41:39 Found file: /etc/pam.d/runuser
2020-06-23 18:41:39 Found file: /etc/pam.d/runuser-l
2020-06-23 18:41:39 Found file: /etc/pam.d/smartcard-auth
2020-06-23 18:41:39 Found file: /etc/pam.d/sshd
2020-06-23 18:41:39 Found file: /etc/pam.d/sssd-shadowutils
2020-06-23 18:41:39 Found file: /etc/pam.d/su
2020-06-23 18:41:39 Found file: /etc/pam.d/su-l
2020-06-23 18:41:39 Found file: /etc/pam.d/sudo
2020-06-23 18:41:39 Found file: /etc/pam.d/sudo-i
2020-06-23 18:41:39 Found file: /etc/pam.d/system-auth
2020-06-23 18:41:39 Found file: /etc/pam.d/systemd-user
2020-06-23 18:41:39 Found file: /etc/pam.d/vlock
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9268 (Checking presence pam.d files)
2020-06-23 18:41:39 Test: Searching pam modules
2020-06-23 18:41:39 Test: Checking /lib/arm-linux-gnueabihf/security
2020-06-23 18:41:39 Result: directory /lib/arm-linux-gnueabihf/security could not be found or is a symlink to another directory
2020-06-23 18:41:39 Test: Checking /lib/i386-linux-gnu/security
2020-06-23 18:41:39 Result: directory /lib/i386-linux-gnu/security could not be found or is a symlink to another directory
2020-06-23 18:41:39 Test: Checking /lib/security
2020-06-23 18:41:39 Result: directory /lib/security could not be found or is a symlink to another directory
2020-06-23 18:41:39 Test: Checking /lib/x86_64-linux-gnu/security
2020-06-23 18:41:39 Result: directory /lib/x86_64-linux-gnu/security could not be found or is a symlink to another directory
2020-06-23 18:41:39 Test: Checking /lib64/security
2020-06-23 18:41:39 Result: directory /lib64/security exists
2020-06-23 18:41:39 Found file: /lib64/security/pam_access.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_cap.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_chroot.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_console.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_cracklib.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_debug.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_deny.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_echo.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_env.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_exec.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_faildelay.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_faillock.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_filter.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_ftp.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_group.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_issue.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_keyinit.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_lastlog.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_limits.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_listfile.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_localuser.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_loginuid.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_mail.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_mkhomedir.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_motd.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_namespace.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_nologin.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_permit.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_postgresok.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_pwhistory.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_pwquality.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_rhosts.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_rootok.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_securetty.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_selinux.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_sepermit.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_shells.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_sss.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_stress.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_succeed_if.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_systemd.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_systemd_home.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_time.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_timestamp.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_tty_audit.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_umask.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_unix.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_userdb.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_usertype.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_warn.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_wheel.so
2020-06-23 18:41:39 Found file: /lib64/security/pam_xauth.so
2020-06-23 18:41:39 Test: Checking /usr/lib
2020-06-23 18:41:39 Result: directory /usr/lib exists
2020-06-23 18:41:39 Test: Checking /usr/lib/security
2020-06-23 18:41:39 Result: directory /usr/lib/security could not be found or is a symlink to another directory
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9278 (Determine LDAP support in PAM files)
2020-06-23 18:41:39 Test: checking presence /etc/pam.d/common-auth
2020-06-23 18:41:39 Result: file /etc/pam.d/common-auth not found, skipping test
2020-06-23 18:41:39 Test: checking presence /etc/pam.d/system-auth
2020-06-23 18:41:39 Result: file /etc/pam.d/system-auth exists
2020-06-23 18:41:39 Test: checking presence LDAP module
2020-06-23 18:41:39 Result: LDAP module not found
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9282 (Checking password protected account without expire date)
2020-06-23 18:41:39 Test: Checking Linux version and password expire date status
2020-06-23 18:41:39 Result: all accounts seem to have an expire date
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9283 (Checking accounts without password)
2020-06-23 18:41:39 Test: Checking passwordless accounts
2020-06-23 18:41:39 Result: all accounts seem to have a password
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9286 (Checking user password aging)
2020-06-23 18:41:39 Test: Checking PASS_MIN_DAYS option in /etc/login.defs
2020-06-23 18:41:39 Result: password needs to be at least 1 days old
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (3). Currently having 33 points (out of 33)
2020-06-23 18:41:39 Test: Checking PASS_MAX_DAYS option in /etc/login.defs
2020-06-23 18:41:39 Result: max password age is 90 days
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (3). Currently having 36 points (out of 36)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9288 (Checking for expired passwords)
2020-06-23 18:41:39 Test: check if we can access /etc/shadow (escaped: /etc/shadow)
2020-06-23 18:41:39 Result: file is owned by our current user ID (0), checking if it is readable
2020-06-23 18:41:39 Result: file /etc/shadow is readable (or directory accessible).
2020-06-23 18:41:39 Data: Days since epoch is 18436
2020-06-23 18:41:39 Test: collecting accounts which have an expired password (last day changed + maximum change time)
2020-06-23 18:41:39 Result: good, no passwords have been expired
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (10). Currently having 46 points (out of 46)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Skipped test AUTH-9304 (Check single user login configuration)
2020-06-23 18:41:39 Reason to skip: Incorrect guest OS (Solaris only)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Skipped test AUTH-9306 (Check single boot authentication)
2020-06-23 18:41:39 Reason to skip: Incorrect guest OS (HP-UX only)
2020-06-23 18:41:39 ====
2020-06-23 18:41:39 Performing test ID AUTH-9308 (Check single user login configuration)
2020-06-23 18:41:39 Test: going to check several systemd targets now
2020-06-23 18:41:39 Test: checking if target console-shell.service is available (/lib/systemd/system/console-shell.service)
2020-06-23 18:41:39 Result: target console-shell.service not found
2020-06-23 18:41:39 Test: checking if target emergency.service is available (/lib/systemd/system/emergency.service)
2020-06-23 18:41:39 Result: found target emergency.service
2020-06-23 18:41:39 Result: sulogin was found, which is a good measure to protect single user mode
2020-06-23 18:41:39 Test: checking if target rescue.service is available (/lib/systemd/system/rescue.service)
2020-06-23 18:41:39 Result: found target rescue.service
2020-06-23 18:41:39 Result: sulogin was found, which is a good measure to protect single user mode
2020-06-23 18:41:39 Result: option set, password is needed at single user mode boot
2020-06-23 18:41:39 Hardening: assigned maximum number of hardening points for this item (2). Currently having 48 points (out of 48)
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Performing test ID AUTH-9328 (Default umask values)
2020-06-23 18:41:40 Test: Checking /etc/profile.d directory
2020-06-23 18:41:40 Result: found /etc/profile.d, with one or more files in it
2020-06-23 18:41:40 Result: found a weak umask '007' set in /etc/profile.d/umask.sh
2020-06-23 18:41:40 Result: found a strong umask '027' set in /etc/profile.d/umask.sh
2020-06-23 18:41:40 Test: Checking /etc/profile
2020-06-23 18:41:40 Result: file /etc/profile does not exist
2020-06-23 18:41:40 Test: Checking umask entries in /etc/passwd (pam_umask)
2020-06-23 18:41:40 Result: file /etc/passwd exists
2020-06-23 18:41:40 Test: Checking umask value in /etc/passwd
2020-06-23 18:41:40 Manual: one or more manual actions are required for further testing of this control/plugin
2020-06-23 18:41:40 Test: Checking /etc/login.defs
2020-06-23 18:41:40 Result: file /etc/login.defs exists
2020-06-23 18:41:40 Test: Checking umask value in /etc/login.defs
2020-06-23 18:41:40 Result: umask is 027, which is fine
2020-06-23 18:41:40 Hardening: assigned maximum number of hardening points for this item (2). Currently having 50 points (out of 50)
2020-06-23 18:41:40 Test: Checking /etc/init.d/functions
2020-06-23 18:41:40 Result: file /etc/init.d/functions exists
2020-06-23 18:41:40 Test: Checking umask value in /etc/init.d/functions
2020-06-23 18:41:40 Result: umask is 027, which is fine
2020-06-23 18:41:40 Hardening: assigned maximum number of hardening points for this item (2). Currently having 52 points (out of 52)
2020-06-23 18:41:40 Test: Checking /etc/init.d/rc
2020-06-23 18:41:40 Result: file /etc/init.d/rc does not exist
2020-06-23 18:41:40 Test: Checking /etc/init.d/rcS
2020-06-23 18:41:40 Result: file /etc/init.d/rcS does not exist
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Skipped test AUTH-9340 (Solaris account locking)
2020-06-23 18:41:40 Reason to skip: Incorrect guest OS (Solaris only)
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Performing test ID AUTH-9402 (Query LDAP authentication support)
2020-06-23 18:41:40 Result: LDAP authentication not enabled
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Skipped test AUTH-9406 (Query LDAP servers in client configuration)
2020-06-23 18:41:40 Reason to skip: Prerequisites not met (ie missing tool, other type of Linux distribution)
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Skipped test AUTH-9408 (Logging of failed login attempts)
2020-06-23 18:41:40 Reason to skip: Skipped by profile setting (skip-test)
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Skipped test AUTH-9409 (Checking /etc/doas.conf file)
2020-06-23 18:41:40 Reason to skip: Incorrect guest OS (OpenBSD only)
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Skipped test AUTH-9410 (Check /etc/doas.conf file permissions)
2020-06-23 18:41:40 Reason to skip: Incorrect guest OS (OpenBSD only)
2020-06-23 18:41:40 Security check: file is normal
2020-06-23 18:41:40 Checking permissions of /usr/share/lynis/include/tests_shells
2020-06-23 18:41:40 File permissions are OK
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Action: Performing tests from category: Shells
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Skipped test SHLL-6202 (Check console TTYs)
2020-06-23 18:41:40 Reason to skip: Incorrect guest OS (FreeBSD only)
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Performing test ID SHLL-6211 (Available and valid shells)
2020-06-23 18:41:40 Test: Searching for /etc/shells
2020-06-23 18:41:40 Result: Found /etc/shells file
2020-06-23 18:41:40 Test: Reading available shells from /etc/shells
2020-06-23 18:41:40 Found installed shell: /bin/sh
2020-06-23 18:41:40 Found installed shell: /bin/bash
2020-06-23 18:41:40 Found installed shell: /usr/bin/sh
2020-06-23 18:41:40 Found installed shell: /usr/bin/bash
2020-06-23 18:41:40 ====
2020-06-23 18:41:40 Performing test ID SHLL-6220 (Idle session killing tools or settings)
2020-06-23 18:41:40 Test: Search for session timeout tools or settings in shell
2020-06-23 18:41:40 Performing pgrep scan without uid
2020-06-23 18:41:40 IsRunning: process 'timeoutd' not found
2020-06-23 18:41:40 Performing pgrep scan without uid
2020-06-23 18:41:40 IsRunning: process 'autolog' not found
2020-06-23 18:41:40 Result: could not find TMOUT setting in /etc/profile
2020-06-23 18:41:40 Result: could not find export, readonly or typeset -r in /etc/profile
2020-06-23 18:41:40 Output: 300