mirrors/linux-bench
1
0
Fork 1
mirror of https://github.com/aquasecurity/linux-bench.git synced 2025-02-22 22:25:33 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark
67 commits 9 branches 6 tags 498 KiB
Go 99%
Makefile 1%
Find a file
Parikshit Hooda 8bb91188a7
Update README.md - refactor documentation 
Converted identifying requirements to bullet points rather than plain lines, owing to better comprehensibility.
Changed \####\ to ** ** - Because it makes sense to bolden the bullet points, rather than declaring them as headers
2019-10-11 01:50:31 +05:30
cfg Merge branch 'master' into patch-8 2019-10-10 09:43:53 +01:00
.gitignore Create .gitignore 2019-08-06 22:53:05 +03:00
.travis.yml Update .travis.yml 2019-08-07 14:02:16 +03:00
app.go Add constraints info for debug mod 2019-09-17 01:11:25 +03:00
app_test.go Initialized basic bench project 2019-01-30 16:54:44 +02:00
go.mod Create go.mod 2019-08-07 19:15:10 +03:00
go.sum Create go.sum 2019-08-07 19:20:15 +03:00
LICENSE Added license and notice files. 2019-02-10 11:44:56 +02:00
main.go Initialized basic bench project 2019-01-30 16:54:44 +02:00
makefile Update makefile 2019-08-07 14:04:50 +03:00
NOTICE Added license and notice files. 2019-02-10 11:44:56 +02:00
README.md Update README.md - refactor documentation 2019-10-11 01:50:31 +05:30
root.go Add support for writing JSON results to output file using --output flag 2019-05-23 17:34:21 +03:00
utils.go change the regex to catch version 2019-05-30 00:04:10 +03:00

README.md

Build Status License Coverage Status

Linux-bench is a Go application that checks whether The linux operating system is configured securely by running the checks documented in the CIS Distribution Independent Linux Benchmark.

Tests are configured with YAML files, making this tool easy to update as test specifications evolve.

CIS Linux Benchmark support

linux-bench currently supports tests for benchmark version 1.1.0 only.

linux-bench will determine the test set to run on the host machine based on the following:

  • Operating system platform - ubuntu/debian/rhel/coreos
  • Boot loader - grub/grub2
  • System logging tool - rsyslog/syslog-ng
  • Lsm - selinux/apparmor

Installation

Installing from sources

Intall Go, then clone this repository and run as follows (assuming your $GOPATH is set):

go get github.com/aquasecurity/linux-bench
cd $GOPATH/src/github.com/aquasecurity/linux-bench
go build -o linux-bench .

# See all supported options
./linux-bench --help

# Run checks
./linux-bench

# Run checks for specified linux cis version
./linux-bench --version <version>

Tests

Tests are specified in definition files cfg/<version>/definitions.yaml.

Where <version> is the version of linux cis for which the test applies.

Contributing

We welcome PRs and issue reports.