Closed bcoles closed 5 years ago
By any chance Lynis also installed as a package?
By any chance Lynis also installed as a package?
Yes, yes it is:
root@kali-2018:/# apt show lynis
Package: lynis
Version: 2.6.2-1
Priority: optional
Section: utils
Maintainer: Francisco Manuel Garcia Claramonte <francisco@debian.org>
Installed-Size: 1,385 kB
Depends: e2fsprogs
Recommends: menu
Suggests: dnsutils, apt-listbugs, debsecan, debsums, tripwire, samhain, aide, fail2ban
Homepage: http://cisofy.com/lynis/
Tag: interface::commandline, role::program, scope::utility,
security::integrity, security::log-analyzer, use::checking,
use::monitor
Download-Size: 220 kB
APT-Manual-Installed: no
APT-Sources: http://http.kali.org/kali kali-rolling/main amd64 Packages
Description: security auditing tool for Unix based systems
Lynis is an auditing tool for hardening GNU/Linux and Unix based systems.
It scans the system configuration and creates an overview of system information
and security issues usable by professional auditors.
It can assist in automated audits.
.
Lynis can be used in addition to other software, like security
scanners, system benchmarking and fine-tuning tools.
root@kali-2018:/# which lynis
/usr/sbin/lynis
root@kali-2018:/#
Having two different Lynis versions installed may conflict.
Suggestion:
Choose one and the errors should be gone :)
Having two different Lynis versions installed may conflict.
Suggestion:
* Prefer the very latest version (in development)? Deinstall the Lynis package and use the one from GitHub and keep it up-to-date. * Prefer to have the latest stable version? Use that from https://packages.cisofy.com/ instead of that of Debian
Choose one and the errors should be gone :)
I did uninstall the apt version of lynis from my kali machine and used only the github one..
The thing is that i still get this line : [WARNING]: Deprecated function used (logtext)
and it doesnt show off anymore when i use --use-cwd flag
@its0x08 - seeing it works with --use-cwd
, it looks like the installation is not fully removed. Maybe in /usr/local/lynis? Otherwise lynis show includedir
might give a hint, or use find
, or strace
to see what paths are tried and used.
As this existing issue is old, please open a new one if you can't get it resolved.
@its0x08 The Debian / Ubuntu downstream package contains an additional plugin specifically for Debian / Ubuntu (about e.g. Debian goodies or so on), this one uses the deprecated function.
I had to purge lynis to completely remove these warnings:
root@vlazic-ea:/var/log/lynis# apt purge lynis
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
lynis*
0 upgraded, 0 newly installed, 1 to remove and 27 not upgraded.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n]
(Reading database ... 310425 files and directories currently installed.)
Purging configuration files for lynis (2.6.2-1) ...
dpkg: warning: while removing lynis, directory '/etc/lynis' not empty so not removed
[master d910a16] committing changes in /etc made by "apt purge lynis"
5 files changed, 1179 deletions(-)
delete mode 100644 lynis/README
delete mode 100644 lynis/default.prf
delete mode 100755 lynis/plugins/custom_plugin.template
delete mode 100644 lynis/plugins/plugin_debian_phase1
@vlazic Please contact the Debian package maintainer about this. We believe it is in the best interest for all to get everything into the master, so that no additional patches have to be applied to OS-specific packages.
Freshly cloned from
master
branch, running on up-to-date Kali.I like the part where it says
[WARNING]: Deprecated function used (logtext)
.