CISOfy / lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
https://cisofy.com/lynis/
GNU General Public License v3.0
13.4k stars 1.48k forks source link

Please undo #413, support debsums on Ubuntu and derivatives #446

Closed tomreyn closed 7 years ago

tomreyn commented 7 years ago

Hi,

In #413 I stated that debsums does not work on Ubuntu and derivatives. This statement was erroneous and is factually false. I have to apologize for this mistake, and suggest to support debsums on Ubuntu and derivatives again, since it does work.

What does not work on Ubuntu (and most likely its derivatives as well) is debsecan, due to lack of a compatible data feed. You may want to remove support for this on Ubuntu and derivatives (only).

Sorry again,

Tom

mboelen commented 7 years ago

Hmm, I see. Want to help out and undo the change in the form of a pull request? :)

tomreyn commented 7 years ago

Sure, and sorry again. Please check #457.

Regarding Debsecan: Test PKGS-7366 is already restricted to Debian systems, so there is nothing left to be done about debsecan. https://github.com/CISOfy/lynis/blob/92d53581f9ca77f3a3cc9ae4ec9a00ae4a5c7e87/include/tests_ports_packages#L603

mboelen commented 7 years ago

Close with pull request #457