2 ms·
Not everyone comes with the same skill set or expertise. If you work at a big multinational, reinstalling hundreds or even thousands of systems, is no option. L
by mboelen 11y ago
Not everyone comes with the same skill set or expertise. If you work at a big multinational, reinstalling hundreds or even thousands of systems, is no option. Lynis, free to use, simply helps you determining the sanity level in a quick way.
The main focus of Lynis is security auditing. Since some parts are so important for integrity of the systems or forensics, we do check them. Proper timing is one of them, proper DNS configuration is another one. Some things you want to put into your monitoring system as a regular test, other will be handled by the tooling itself. What we find, is that Lynis often detects incorrect configurations. That is exactly the purpose of the tool. Helping those, who didn't know, or thought things were fine.
Appreciate your stance, understand it and even agree with most of it. The tool is there to help to achieve what we both see as an ideal world: secure permissions by default, proper configurations, correct monitoring and integrity of data. Till the time we achieved that, I'm glad to see many were able to move up a few steps to this ideal world. Till then, happy hardening :)