Advice and answers from the Hostrare TeamKnowledge base

Troubleshoot - by Hostrare

Update On: 23 Jul 2021Lynis Security auditing tool

Lynis is an open-source safety auditing tool. Its main purpose is to audit and develop Unix and Linux-based policies. It scans the method by performing many protection key checks. Samples include searching for connected software and manage possible configuration defects.
Many tests are part of common safety guidelines and examples, with on top added security tests. After the scan, a report will be performed with all identified conclusions.

Typical use cases for Lynis:

Security auditing
Vulnerability scanning
System hardening

Examples tests:

Available authentication systems
Expired SSL certifications
Outdated or unsafe software bundles
Time configuration and proper functioning of NTP daemon
User stories without an identification
Incorrect file permissions
Configuration errors
Firewall controls.

Supported systems

Since the complexity of auditing complex methods and programs, Lynis is generated on BSD and Linux.
This tool is examined or verified to work with at least:
AIX, Linux, FreeBSD, OpenBSD, Mac OS X, Solaris. View the website for the full list of questioned working methods.

Lynis Security auditing tool Installation

SSH to your server as root user.

#cd /usr/local/src

#wget http://cisofy.com/files/lynis-1.5.9.tar.gz

#tar -zxvf lynis-1.5.9.tar.gz

#cd lynis-1.5.9/

# ./lynis

Audit/Scan your server now

# ./lynis -c

For more help

#./lynis -h

[+] Initializing program
————————————
Scan options:
–auditor “” : Auditor name
–check-all (-c) : Check system
–no-log : Don’t create a log file
–profile : Scan the system with the given profile file
–quick (-Q) : Quick mode, don’t wait for user input
–tests “” : Run only tests defined by
–tests-category “” : Run only tests defined by

Layout options:
–no-colors : Don’t use colors in output
–quiet (-q) : No output, except warnings
–reverse-colors : Optimize color display for light backgrounds

Misc options:
–check-update : Check for updates
–debug : Debug logging to screen
–view-manpage (–man) : View man page
–version (-V) : Display version number and quit

Enterprise options:
–plugin-dir “<path”> : Define path of available plugins
–upload : Upload data to central node

See man page and documentation for all available options.

Thats All..