lynis - Lynis - Security auditing tool for Linux, macOS, a

项目说明

![Linux Security Expert badge]()
![Build Status]()
![CII Best Practices]()
[Documentation]

[Documentation]:

Do you like this software? Star the project and become a stargazer.

----

lynis

> Lynis - Security auditing and hardening 工具, for UNIX-based systems.

Lynis is a security auditing 工具 for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and runs on the system itself. The primary goal is to test security defenses and provide tips for further system hardening. It will also scan for general system information, software packages, and possible configuration issues. Lynis was commonly used by system administrators and auditors to assess the security defenses of their systems. Besides the "blue team," nowadays penetration testers also ha in their toolkit.

We belie should be simple, updated on a regular basis, and open. You should be able to trust, understand, and have the option to change the software. Many agree with us, as the software is being used by thousands every day to protect their systems.

Goals

The main goals of Lynis include:

The software (also) assists with:

Audience

Typical users of the software:

Installation

There are multiple options a to install Lynis.

Software package

For systems running Linux, BSD, and macOS, there is typically a package a. This is the preferred method of obtaining Lynis, as it is quick to install and easy to update. The Lynis project itself also provides packages in RPM or DEB format suitable for systems systems running:
CentOS, Debian, Fedora, OEL, openSUSE, RHEL, Ubuntu, and others.

Some distributions may also ha in their software repository: ![Repology]()

Note: Some distributions don't provide an up-to-date . In that case it is better to use the CISOfy software repository, download the tarball from the website, or download the latest GitHub release.

Git

The very latest de can be obtained via git.

1. Clone or download the project files (no compilation nor installation is required) ;

git clone

2. Execute:

cd lynis && ./lynis audit system

If you want to run the software as root (or sudo), we suggest changing the ownership of the files. Use chown -R 0:0 to recursively alter the owner and group and set it to user ID 0 (root). Otherwise Lynis will warn you about the file permissions. After all, you are executing files owned by a non-pri user.

Documentation

Have a look at the Lynis documentation to learn more about the configuration and usage of Lynis. When you are interested in reading more articles about Linux security, then check out the Linux security blog named Linux Audit. For some suggestions by Lynis, this is also the 源码 used to learn more about specific findings.

Customization

If you want to create your own tests, have a look at the Lynis software de kit.

Security

We participate in the CII best practices badge program of the Linux Foundation.

Media and Awards

Lynis is collecting some awards along the way and we are proud of that.

* 2016
* Best of Open 源码 Software Awards 2016.
* Article by TechRepublic, considering Lynis a "must-have" 工具: How to quickly audit a Linux system from the command line
* ![ToolsWatch Best Tools (top 10)]()

* 2015
* ![ToolsWatch Best Tools (second place)]()
* Best of Open 源码 Software Awards 2015 (mirror).

* 2014
* ![ToolsWatch Best Tools (third place)]()

* 2013
* ![ToolsWatch Best Tools (sixth place)]()

Contribute

> We lo.

Do you ha to share? Want to help out with translating Lynis into your own language? Create an issue or pull request on GitHub, or send us an e-mail: lynis-de.com.

More details can be found in the Contributors Guide.

You can also simply contribute to the project by _starring_ the project and show your appreciation that way.

Thanks!

License

> GPLv3

Enterprise for companies

This software component is also part of an enterprise solution and focuses on companies. Same quality, yet with more functionality.

Focus areas include compliance (PCI DSS, HIPAA, ISO27001, and others). The Enterprise comes with:
* a web interface;
* dashboard and reporting;
* hardening snippets;
* impro plan (based on risk);
* commercial support.

项目信息

开发语言：Shell

Star 数：16432

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Lynis - Security auditing 工具 for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。