Giter Club home page Giter Club logo

lusas's Introduction

Linux/unix security auditing scripts "Lusas"

This is a collection of command line security auditing scripts for Linux/Unix. Originally by Sean Boran in 2000, Pablo Endres took over the project in 2008.

License: GPL v3.0

Please share any fixes/improvements you make, if possible. Or help with documentation. Starting Points

USAGE:

./lusas-basic.sh [option]

OPTIONS:

   -h	Show this message
   -d	email or emails where to send the results. i.e.: [email protected],[email protected],root
   -e	Extended.  Collect a copy of files
   -s	Verify package checksums
   -l	Don't clean up after run. Leave the directory with the results on disk.
   -c	Cleanup after run, leave nothing behind.

	If neither -l or -c are not set a .tar.gz file with the result will be left on disk.

lusas's People

Contributors

epablosensei avatar

Stargazers

katalyst avatar KamalMostafa avatar Carsten Marmulla avatar

Watchers

 avatar

lusas's Issues

Solaris 9 Cluster reboot

When run on a clients Sun Cluster a script in /etc/init.d/ reboots the server.

Make sure all scripts in the directory have a "case $1" before calling it


Original issue reported on code.google.com by epablo%[email protected] on 16 Sep 2010 at 10:48

Can we move to a common repo on https://github.com/Boran/lusas ?

Hi,

Its been a long time since we talked!

I got the request to move lusas from googlecode a while back, so I did so and update the README with recently (since I had to do an audit..).
Then I seen that you also created a repo on github too.

I have added you as a collaborator to my repo, so you should be able to commit any changes to your lusas-basic.

So you could you push any commits you make to my repo.. Or if you prefer, fork it. But we should agree to have a common starting point if at all possible.

Regards,

Sean Boran

review 31.12.08

Looks good. 
Tested on Ubuntu 8.04, as:
  ./lusas-basic.sh -c
  ./lusas-basic.sh -e -s

Basic:
  move Memory Info to kernel?
  move ">>>>>>>>>> Networking Information ----------" and all its 
subsections to "kernel" or move ps -ef & lsof from kernel back in here.
  move "Java version" to services

  Move >>>>>>>>>> Software, Packages ---------- into a separate file as the 
output can be very long.

I've also updated the README and home page on google.


Original issue reported on code.google.com by [email protected] on 31 Dec 2008 at 10:10

/dev/null permissions being reset to crw-------

What steps will reproduce the problem?
1. Run lusas
2. ls -ald /dev/null
crw------- 1 root root 1, 3 2008-05-28 12:17 /dev/null

To fix:
chmod a+rw /dev/null

This is a critical issue as it will break some applications (e.g. cacti for 
me). Lusas must not make any systems changes.





Original issue reported on code.google.com by [email protected] on 31 Dec 2008 at 12:23

hangs in services

What steps will reproduce the problem?
 ./lusas-basic.sh -c     on a specific Ubuntu 8.04 system

What is the expected output? What do you see instead?
 It sits there hanging. The last entry in lusas-basic.log is "Running 
Services Module"

services contains
----- snip --
>>>>>>>>>> Services ----------
---------- Services status ----------

Running services -----
Usage: /etc/init.d/alsa-utils {start [CARD]|stop [CARD]|restart 
[CARD]|reset [CARD]}
Usage: bootmisc.sh [start|stop]
Usage: checkfs.sh [start|stop]
Usage: checkroot.sh [start|stop]
Usage: /etc/init.d/halt start|stop
Usage: hostname.sh [start|stop]
Usage: /etc/init.d/killprocs start|stop
Usage: /etc/init.d/libpam-foreground {start|stop|restart|force-reload}
Usage: /etc/init.d/makedev {start|stop|restart|force-reload}
Usage: mountall-bootclean.sh [start|stop]
Usage: mountall.sh [start|stop]
Usage: mountdevsubfs [start|stop]
Usage: mountvirtfs [start|stop]
Usage: mountnfs-bootclean.sh [start|stop]
Usage: mountoverflowtmp [start|stop]
Usage: mountall-mtab.sh [start|stop]
Usage: /etc/init.d/procps {start|stop|restart|force-reload}
Usage: /etc/init.d/rc.local start|stop
ifup: interface lo already configured
mount: you must specify the filesystem type
--- snip -----

Analysis: The affected code is:
if   [ "$os" = "Linux" ] ; then
        $echo "Running services -----"
        for i in `ls /etc/init.d/*`; do $i status; done |grep running 2> 
/dev/null

so many startup scripts don't have a "status" parameter, maybe do an echo 
of the startupscript name before doing a status, or just comment out this 
code for now?


Original issue reported on code.google.com by [email protected] on 31 Dec 2008 at 10:33

Can't check the PATH 'cause it's beeing overwritten by script

What steps will reproduce the problem?
1. run the script
2. read the results from env

What is the expected output? What do you see instead?
You should be able to check the PATH set by the root user, instead it is
overwritten by the script.

.


Original issue reported on code.google.com by epablo%[email protected] on 22 Jan 2009 at 3:00

Remove the grep on the /etc/init.d/<service> status

Lots of services answer with a PID
Language issues can also come up, can't assume all boxes are in english

This is where the change should be made:

###  * Services status
...

        if [ "$dist" =  "redhat" ] ; then
                $echo "Running services -----\n"
                for i in `ls /etc/init.d/*`; do $i status; done |grep
running 2> /dev/null


Original issue reported on code.google.com by epablo%[email protected] on 23 Jan 2009 at 9:19

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.