CISOfy / lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
https://cisofy.com/lynis/
GNU General Public License v3.0
13.47k stars 1.49k forks source link

KRNL-5820: Add support for openSUSE's alternative security/limits.conf path #1264

Open rfrohl opened 2 years ago

rfrohl commented 2 years ago

Is your feature request related to a problem? Please describe. openSUSE distros (MicroOS, Tumbleweed) provide an alternative way to update the system, called atomic updates. Part of this feature are alternative paths for config files under /usr/etc.

Describe the solution you'd like KRNL-5730 should be able to detect limits.conf in none default locations, like /usr/etc/security/limits.conf.

Required changes KRNL-5730 needs to check under /usr/etc/security/ for a limits.conf too.

Additional context Details about the move to /usr/etc

https://kubic.opensuse.org/blog/2019-12-05-usr-etc/

rfrohl commented 2 years ago

Posted a suggested change, please let me know if it would require changes.

testing this change currently in the openSUSE infra, local tests look good so far.