Viewing profile — mboelen

That is exactly why Lynis was created, to make it easier for both a sysadmin and auditor to validate things. At the same time, not every system needs the security level of a bank, …

That is also why Lynis does not follow a specific set, but applies generic principles from multiple sources. Yes, some of the items may be default (now) in Linux distributions, but…

Lynis author here. While some defaults definitely became better, often due to the kernel itself being better protected, there is still a lot of room for improvement. The distributi…

Did you try Lynis as an alternative?

It almost does all that you ask. There is a big downside of the toolkit: it is filled with abbreviations, XML files, and binaries. For that reason, I still develop an alternative p…

You might like Lynis ( https://github.com/CISOfy/lynis ). A lightweight security scanner that can be integrated as well.

Hi HN! This is Michael, a tool author myself. I created this project to have an up-to-date database source for Linux security topics. Starting with security tools and have them cat…

Someone submitted my security tool Lynis during Black Hat Europe: https://github.com/CISOfy/lynis (original link https://news.ycombinator.com/item?id=12870753 ). The result was a s…

Most Linux distributions have to make a compromise between performance, easy of use, security, and more. In the end, you will have to do tuning, and that includes tuning for perfor…

* Project name: Lynis ( https://github.com/CISOfy/lynis/ ), GPLv3 * Project description: security auditing tool for Linux, macOS, and UNIX-derivatives. The primary goal is to assis…

At our company (CISOfy) we created a solution around our existing open source project Lynis ( https://github.com/CISOfy/lynis ). This way the tool in itself provides value, yet the…

Thanks for sharing your intrusion story. Although it is always painful for the person to experience, it gives good insights on what happens in the wild. As the author of security t…