Lynis – Security Auditing

Lynis is a security auditing tool for Unix-based systems. It performs an in-depth security scan and provides recommendations for hardening your system.

Key Features

• Comprehensive Scan: Checks hundreds of tests
• Compliance: ISO27001, PCI-DSS, HIPAA
• Hardening Index: Security scoring
• Suggestions: Actionable recommendations
• Custom Tests: Extensible test framework

Installation

Install Lynis on Ubuntu:

sudo apt update
sudo apt install lynis

Usage Examples

Lynis audit commands:

# Run full audit
sudo lynis audit system

# Quick scan
sudo lynis audit system --quick

# Custom profile
sudo lynis audit system --profile /etc/lynis/custom.prf

# Check specific test
sudo lynis show details BOOT-5264

# View report
sudo cat /var/log/lynis.log

Benefits

Lynis identifies security weaknesses with clear remediation guidance. Regular scans help maintain system security posture and compliance.

Download Lynis