From patchwork Mon Sep 6 15:27:07 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 4677 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4H3C2136wNz3xKg for ; Mon, 6 Sep 2021 15:27:21 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4H3C1y5fzbz2B0; Mon, 6 Sep 2021 15:27:18 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4H3C1y0zJTz2xvK; Mon, 6 Sep 2021 15:27:18 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4H3C1w0CMlz2xSG for ; Mon, 6 Sep 2021 15:27:16 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4H3C1v09wxzQK; Mon, 6 Sep 2021 15:27:14 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1630942035; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=k7j0zSdR0fUZKgo1u1AIesQThOVE6Tlj+puaF+1+zdk=; b=ZWFk21zUhlQ7csiHPjw2FgFEWfLtL9fg4o+ZUW9aP4s23vRZkvNL1rZbrinkg6SQdwXIwp raq5sqjTA2EvpSCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1630942035; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=k7j0zSdR0fUZKgo1u1AIesQThOVE6Tlj+puaF+1+zdk=; b=RwaLgybz73zdr2Z2dDYJtSOWuVCae2qAy2zYtbpLb6XA1wr7LMn0sMTJRjnwrG7lwZfXWF 6LIvxzkwn2erGe0tUGmOVO/vGSXhHQTHUpl56sND+oHLRJcv35t+Kbllwmdnp0MVNDXL/P FR3b1vQirfDuu2MR5jfjChNMjhKU1M9rbPzQCSO1E+RGNxRLLQQsO/gXPma76wrJBEDYQL Md2EiwNfSWsYFeBvs6cqF7cT6oFz9RqWfvQCTctIxTTuGSvSQANfalf884PmyqpHlcMWUp LHBf1Uc7xvqmLhNHBMStFzNzi1MSzOAlfvPHzqiSQBMWj0nKgHC+AXx/gJEK3A== From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH v2] lynis: Update to version 3.0.6 Date: Mon, 6 Sep 2021 17:27:07 +0200 Message-Id: <20210906152707.3623171-1-adolf.belka@ipfire.org> MIME-Version: 1.0 X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" - v2 version uses the source file from https://github.com/CISOfy/lynis/releases instead of https://cisofy.com/downloads/lynis/, which has a source file with some files missing compared to the github version. - Update from 3.0.3 to 3.0.6 - Update of rootfile not required - Changelog ## Lynis 3.0.6 (2021-07-22) ### Added - OS detection: Artix Linux, macOS Monterey, NethServer, openSUSE MicroOS - Check for outdated translation files ### Changed - DBS-1826 - Check if PostgreSQL is being used - DBS-1828 - Test multiple PostgreSQL configuration file(s) - KRNL-5830 - Sort kernels by version instead of modification date - PKGS-7410 - Don't show exception for systems using LXC - GetHostID function: fallback options added for Linux systems - Fix: macOS Big Sur detection - Fix: show correct text when egrep is missing - Fix: variable name for PostgreSQL - German and Spanish translations extended ## Lynis 3.0.5 (2021-07-02) ### Added - OS detection of Arch Linux 32, BunsenLabs Linux, and Rocky Linux - CRYP-8006 - Check MemoryOverwriteRequest bit to protect against cold-boot attacks (Linux) ### Changed - ACCT-9622 - Corrected typo - HRDN-7231 - When calling wc, use the short -l flag instead of --lines (Busybox compatibility) - PKGS-7320 - extended to Arch Linux 32 - Generation of host identifiers (hostid/hostid2) extended - Linux host identifiers are now using ip as preferred input source - Improved logging in several areas ## Lynis 3.0.4 (2021-05-11) ### Added - ACCT-9670 - Detection of cmd tooling - ACCT-9672 - Test cmd configuration file - BOOT-5140 - Check for ELILO boot loader presence - OS detection of AlmaLinux, Garuda Linux, Manjaro (ARM), and others ### Changed - BOOT-5104 - Add service manager detection support for runit - FILE-6430 - Report suggestion only when at least one kernel module is not in the blacklist - FIRE-4540 - Corrected nftables empy ruleset test - LOGG-2138 - Do not check for klogd when metalog is being used - TIME-3185 - Improved support for Debian stretch - Corrected issue when Lynis is not executed directly from lynis directory Signed-off-by: Adolf Belka --- lfs/lynis | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/lynis b/lfs/lynis index 1ae501603..8f777bb8a 100644 --- a/lfs/lynis +++ b/lfs/lynis @@ -24,7 +24,7 @@ include Config -VER = 3.0.3 +VER = 3.0.6 THISAPP = lynis-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = lynis -PAK_VER = 9 +PAK_VER = 10 DEPS = ############################################################################### @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = d5c7cdbab15029449fe5ef4b59ee941d +$(DL_FILE)_MD5 = c5429c532653a762a55a994d565372aa install : $(TARGET)