NLUUG - Spring 2014 1
Lynis
Security Auditing and Hardening for Linux, Mac & Unix systems
Michael Boelen
Twitter @mboelen
Google+ +MichaelBoelen
Web http://cisofy.com
2
Passion
http://en.wikipedia.org/wiki/File:Passiflora_Edulis_Open_Fruit2.jpg
What's yours?
3
whoami
Michael Boelen
◼ Open Source developer
◼ Author of Rootkit Hunter & Lynis
◼ Passion for auditing
4
The Problem
Auditing and Hardening..
◼ A lot of work!
◼ Not that interesting, right?
◼ And.. prone to errors
5
Solutions
Options
◼ Guides
◼ SCAP
◼ Tools
6
Benchmarks / Guides
Pros
◼ Free to use
◼ Extensive information
Cons
◼ Time intensive
◼ Usually no tooling
◼ Limited distributions
◼ Delayed releases
7
SCAP
Pros
◼ Free to use
◼ Focused on automation
Cons
◼ Limited distributions
◼ Easy of use
◼ Lacking documentation or
already outdated
8
Lynis
9
Lynis
Benefits
● Easy to implement
● Quick results
● Focus on automation
● In-depth auditing
10
Lynis
2007
◼ Quality of existing tools
◼ Efficiency of work
11
Lynis+
2014
◼ New website
◼ Documentation refresh
◼ Lynis controls online
◼ Enterprise support
◼ Plugins
12
Demo
13
Lynis++
DoneDone
● Website
● Documentation
● Lynis controls online
● Enterprise support
● Plugins
NewNew
● In-depth reports
● Hardening automation
● Intrusion detection
● Performance tuning
● Compliance checking
● (Forensics)
● (Malware)
14
Questions?
There is more..
15
Demo 2
16
Thank You
● Try Lynis
● Share open source
Twitter @mboelen
Google+ +MichaelBoelen
Web http://cisofy.com
17

Lynis - Hardening and auditing for Linux, Mac and Unix - NLUUG May 2014