mboelen

6 ms·

1.
by mboelen 2y ago
That is exactly why Lynis was created, to make it easier for both a sysadmin and auditor to validate things. At the same time, not every system needs the security level of a bank, so that is why it provides suggestions. Is something too str
2.
by mboelen 2y ago
That is also why Lynis does not follow a specific set, but applies generic principles from multiple sources. Yes, some of the items may be default (now) in Linux distributions, but often they are still aren't. For example, most systemd
3.
by mboelen 2y ago
Lynis author here. While some defaults definitely became better, often due to the kernel itself being better protected, there is still a lot of room for improvement. The distribution often can't make things too strict, to prevent commo
4.
RSS is cool Some RSS feed readers are not (yet)(linux-audit.com)
4 points by mboelen 2y ago|3 comments
5.
by mboelen 9y ago
Did you try Lynis as an alternative?
6.
by mboelen 9y ago
It almost does all that you ask. There is a big downside of the toolkit: it is filled with abbreviations, XML files, and binaries. For that reason, I still develop an alternative project focused on Linux, macOS, and Unix-derivatives. It is
7.
by mboelen 9y ago
You might like Lynis ( https://github.com/CISOfy/lynis ). A lightweight security scanner that can be integrated as well.
8.
by mboelen 9y ago
Hi HN! This is Michael, a tool author myself. I created this project to have an up-to-date database source for Linux security topics. Starting with security tools and have them categorized and ranked. The goal is to allow people find the ri
9.
Show HN: Open source security tools (top 100) with weekly ranking(linuxsecurity.expert)
3 points by mboelen 9y ago|2 comments
10.
Linux is secure, right?(linux-audit.com)
3 points by mboelen 9y ago|0 comments
11.
by mboelen 9y ago
Someone submitted my security tool Lynis during Black Hat Europe: https://github.com/CISOfy/lynis (original link https://news.ycombinator.com/item?id=12870753 ). The result was a spike in GitHub stars,
12.
by mboelen 9y ago
Most Linux distributions have to make a compromise between performance, easy of use, security, and more. In the end, you will have to do tuning, and that includes tuning for performance and security. As one of the developers of Lynis, I can
13.
Security scanner Lynis now has macOS support(github.com)
1 points by mboelen 10y ago|0 comments
14.
Livepatch: Linux kernel updates without rebooting(linux-audit.com)
2 points by mboelen 10y ago|0 comments
15.
An interview with MalwareMustDie, about Linux malware(linux-audit.com)
2 points by mboelen 10y ago|0 comments
16.
Creating encrypted documents with vim(linux-audit.com)
1 points by mboelen 10y ago|0 comments
17.
Why we use your open source project (or not)(linux-audit.com)
2 points by mboelen 10y ago|0 comments
18.
by mboelen 10y ago
* Project name: Lynis ( https://github.com/CISOfy/lynis/ ), GPLv3 * Project description: security auditing tool for Linux, macOS, and UNIX-derivatives. The primary goal is to assist in security assessments and help
19.
Arch-audit: discover vulnerable packages on Arch Linux(andreascarpino.it)
3 points by mboelen 10y ago|0 comments
20.
by mboelen 10y ago
At our company (CISOfy) we created a solution around our existing open source project Lynis ( https://github.com/CISOfy/lynis ). This way the tool in itself provides value, yet the separate Enterprise offering as well. L
21.
Linux security guide (extended version)(linux-audit.com)
2 points by mboelen 10y ago|0 comments
22.
Open source software needs marketing as well(linux-audit.com)
5 points by mboelen 10y ago|0 comments
23.
When should you do a penetration test?(linux-audit.com)
1 points by mboelen 10y ago|0 comments
24.
Linux system hardening: adding hidepid to /proc(linux-audit.com)
4 points by mboelen 10y ago|0 comments
25.
by mboelen 10y ago
Thanks for sharing your intrusion story. Although it is always painful for the person to experience, it gives good insights on what happens in the wild. As the author of security tools rkhunter and Lynis, it is still a sign that basic (and
26.
How much system hardening is enough?(linux-audit.com)
1 points by mboelen 10y ago|0 comments
27.
by mboelen 10y ago
You are welcome (even without thanking) :)
28.
Linux and rise of Ransomware(linux-audit.com)
2 points by mboelen 10y ago|0 comments
29.
by mboelen 10y ago
Step 1: Try to get in contact with the person and see if he/she is willing to help you share details on entering your systems. Thank this person and see if you can provide a reward. Step 2: Next step is setting up new systems, and star
30.
Three big changes and reasoning behind Lynis 2.3.0(linux-audit.com)
1 points by mboelen 10y ago|0 comments

More ›