Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

2026-01-17T08:13:18Z

Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

← Older revision		Revision as of 08:13, 17 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

			'''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]'''''


	== Usage ==		== Usage ==

Admin: Created page with "Category:Wiki == Usage == The basic syntax for using Lynis is as follows: lynis [OPTIONS] [COMMAND] Where `OPTIONS` define the behavior of the scan and `COMMAND` specifies which audit tasks to perform. == Command Line Options == Lynis offers a range of command-line options that allow for customization of the audit process. === Common Options === * `--help` Displays the help message, listing all available commands and options. l..."

2025-12-14T08:34:08Z

Created page with "Category:Wiki == Usage == The basic syntax for using Lynis is as follows: <nowiki> lynis [OPTIONS] [COMMAND]</nowiki> Where `OPTIONS` define the behavior of the scan and `COMMAND` specifies which audit tasks to perform. == Command Line Options == Lynis offers a range of command-line options that allow for customization of the audit process. === Common Options === * `--help` Displays the help message, listing all available commands and options. <nowiki> l..."

New page

[[Category:Wiki]]

== Usage ==
The basic syntax for using Lynis is as follows:

<nowiki>
lynis [OPTIONS] [COMMAND]</nowiki>

Where `OPTIONS` define the behavior of the scan and `COMMAND` specifies which audit tasks to perform.

== Command Line Options ==
Lynis offers a range of command-line options that allow for customization of the audit process.

=== Common Options ===

* `--help`
Displays the help message, listing all available commands and options.

<nowiki>
lynis --help</nowiki>

* `--version`
Displays the version of Lynis installed on the system.

<nowiki>
lynis --version</nowiki>

* `--verbose`
Provides additional details about the tests being performed. Can be used multiple times to increase verbosity.

<nowiki>
lynis --verbose</nowiki>

* `--quick`
Performs a faster scan by skipping certain checks that may take more time.

<nowiki>
lynis --quick</nowiki>

* `--cron`
Runs Lynis in cron mode, which generates less output for automated reports.

<nowiki>
lynis --cron</nowiki>

=== Specific Commands ===

* `audit system`
Initiates a full audit of the system, checking configuration settings, software packages, and security policies.

<nowiki>
lynis audit system</nowiki>

* `audit plugin`
Runs an audit using specific plugins. Plugins are modular checks that can be enabled or disabled based on user requirements.

<nowiki>
lynis audit plugin</nowiki>

* `--tests <testfile>`
Specifies a custom test file to use instead of the default. This can be useful for focusing on a specific set of checks.

<nowiki>
lynis --tests my_testfile</nowiki>

== Output and Reporting ==
Lynis produces output in several formats, including detailed console output and reports saved to files.

=== Output Types ===

* `stdout`
The standard output for the audit results is printed to the terminal by default.

<nowiki>
lynis audit system</nowiki>

* `report-file`
Lynis can store the audit results in a file, which can be later reviewed or processed. The file path can be specified using the `--report-file` option.

<nowiki>
lynis audit system --report-file /path/to/report.txt</nowiki>

* `json`
For easier automation, Lynis can output the results in JSON format. This allows integration with other tools and scripting.

<nowiki>
lynis audit system --json</nowiki>

=== Log Files ===
Lynis creates log files in the `/var/log/lynis` directory by default. These logs store detailed information about each scan, including any issues detected.

<nowiki>
cat /var/log/lynis/lynis.log</nowiki>

== Detailed Audit ==
The detailed audit output provides information about the security posture of the system and highlights areas that need attention. Each item is assigned a severity score, ranging from 0 (no issue) to 100 (critical issue).

For example, you may see something like:

<nowiki>
+ Test name: File Permissions
Severity: 50
Description: Check file permissions to ensure sensitive files are not accessible by unauthorized users.</nowiki>

These results are grouped by categories, such as:
* System
* Networking
* Authentication
* Applications
* Filesystem

== Customizing Lynis Audits ==
Lynis allows users to customize the tests that are run during an audit by using configuration files or command-line options. For advanced use cases, users may modify the `/etc/lynis/lynis.cfg` file to disable or enable specific tests.

=== Example: Disable Specific Tests ===
To disable specific tests, edit the configuration file `/etc/lynis/lynis.cfg` and comment out unwanted tests.

<nowiki>
# Disable check for empty passwords
disable-tests = 1830</nowiki>

=== Example: Enable Custom Test Suite ===
To use a custom test suite, specify the location of the test file with the `--tests` option.

<nowiki>
lynis audit system --tests /path/to/custom_tests</nowiki>

== Scheduling Lynis Audits ==
Lynis can be automated through cron jobs for periodic scans. A common approach is to schedule a nightly audit to monitor system security on an ongoing basis.

=== Example Cron Job ===
To schedule a nightly Lynis audit at 2 AM, add the following cron job:

<nowiki>
0 2 * * * /usr/local/bin/lynis audit system --cron</nowiki>

== Useful Links ==
* [https://cisofy.com/lynis/ Official Lynis Website]
* [https://github.com/CISOfy/lynis Lynis GitHub Repository]
* [https://cisofy.com/lynis/documentation/ Lynis Documentation]
* [https://cisofy.com/lynis/tutorial/ Lynis Tutorial]
* [https://www.cyberciti.biz/faq/linux-security-auditing-lynis-tool/ Security Auditing with Lynis - Linuxize]

LYNIS - Documentation - Revision history

Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "