lynis: Update to version 3.1.3

- Update from version 3.1.1 to 3.1.3
- Update of rootfile
- Changelog
    3.1.3
	This release introduces additional documentation in the form of blog articles
	 to support the (missing) control information on the website.
	Added
		- Detection of Buildroot, Fedora Linux Asahi Remix, Garden Linux,
		  Peppermint OS
		- Support for blog posts and articles to enhance suggestions
	Changed
		- BOOT-5264 - Changed output of systemd-analyze test and added link
		- FILE-6398 - Test temporarily disabled as on modern kernels JDB
		  support is built-in
		- FIRE-4508 - Several changes to expand the test, make it more generic,
		  resolve minor issues
		- KRNL-5622 - Test if systemctl binary is set
		- Several improvements for busybox
		- Update of translations: Italian, Russian, Spanish
    3.1.2
	Added
		- Detection of ALT Linux
		- Detection of Athena OS
		- Detection of Container-Optimized OS from Google
		- Detection of Koozali SME Server
		- Detection of Nobara Linux
		- Detection of Open Source Media Center (OSMC)
		- Detection of PostmarketOS
		- CRYP-7932 - macOS FileVault encryption test
		- FILE-6398 - Check if JBD (Journal Block Device) driver is loaded
		- FINT-4344 - Wazuh system running state
		- PKGS-7305 - Query macOS Apps in /Applications and CoreServices
		- File added: .editorconfig, which is used by editors to standardize
		  formatting
	Changed
		- Correction of software EOL database and inclusion of AIX entries
		- Support sysctl value perf_event_paranoid -> 2|3
		- Update of translations: German, Portuguese, Turkish
		- Grammar and spell improvements
		- Improved package detection on Alpine Linux
		- Slackware support to check installed packges
		  (functionPackageIsInstalled())
		- Added words prosecute/report to LEGAL_BANNER_STRINGS
		- Busybox support: Replace newer tr command syntax with older ascii
		  specific operations
		- Added Wazuh as a malware scanner/antivirus and rootkit detection tool
		- Updated PHP versions and removed PHP 5 (deprecated)
		- AUTH-9262 - Corrected message with advised PAM libary (libpam-passwdqc)
		- CONT-8104 - Checking for errors, not only warning in docker info output
		- DBS-1826 - PostgreSQL detection improved for AlmaLinux, Rocky Linux,
		  and FreeBSD
		- FILE-6344 - Test kernel version (major/minor)
		- INSE-8000 - Added inetd package and service name used in ubuntu 24.04
		- KRNL-5622 - Use systemctl get-default instead of following link
		- KRNL-5820 - Accept ulimit with -H parameter also
		- LOGG-2144 - Check for wazuh-agent presence on Linux systems
		- MACF-6234 - Test if semanage binary is available
		- MALW-3200 - ESET Endpoint Antivirus added
		- MALW-3280 - McAfee Antivirus for Linux deprecated
		- MALW-3291 - Check if Microsoft Defender Antivirus is installe
		- NETW-3200 - Added regex to allow both /bin/true as /bin/false
		- PKGS-7303 - Added version numbers to brew packages
		- PKGS-7370 - Cron job check for debsums improved
		- PKGS-7392 - Improved filtering of apt-check output (Ubuntu 24.04 may
		  give an error)
		- PKGS-7410 - Added kernel name for Hardkernel odroid XU4

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/packages/lynis b/config/rootfiles/packages/lynis
index 34b07ff32d14c84fd137d5507a0fbe3974497e05..9c0157ddb3af38695c7dd3ce364c528a32f48fa6 100644 (file)
--- a/config/rootfiles/packages/lynis
+++ b/config/rootfiles/packages/lynis
@@ -1,6 +1,7 @@
 var/ipfire/lynis
 #var/ipfire/lynis/LICENSE
 #var/ipfire/lynis/db
+var/ipfire/lynis/db/control-links.db
 var/ipfire/lynis/db/fileperms.db
 var/ipfire/lynis/db/hints.db
 var/ipfire/lynis/db/integrity.db
@@ -87,6 +88,7 @@ var/ipfire/lynis/include/tests_firewalls
 var/ipfire/lynis/include/tests_hardening
 var/ipfire/lynis/include/tests_homedirs
 var/ipfire/lynis/include/tests_insecure_services
+var/ipfire/lynis/include/tests_kerberos
 var/ipfire/lynis/include/tests_kernel
 var/ipfire/lynis/include/tests_kernel_hardening
 var/ipfire/lynis/include/tests_ldap
@@ -118,4 +120,3 @@ var/ipfire/lynis/lynis
 #var/ipfire/lynis/plugins
 #var/ipfire/lynis/plugins/README
 var/ipfire/lynis/plugins/custom_plugin.template
-var/ipfire/lynis/software-eol.db

diff --git a/lfs/lynis b/lfs/lynis
index 38ebac9c668122bc1faab2b975fd1dde77d91e95..b95ace3f4feafbf8c56c45d852215e35334c681a 100644 (file)
--- a/lfs/lynis
+++ b/lfs/lynis
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Security and System auditing tool
 
-VER        = 3.1.1
+VER        = 3.1.3
 
 THISAPP    = lynis-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -49,7 +49,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 056e689f00ac0fa74bd1a6dc3915cbd70f28cdb5461e0749b68ce2cf84e425c295425f7bb6d5aeb0208693a0e38290cb90925e392928257c79bc5887f6e58498
+$(DL_FILE)_BLAKE2 = 68483c194b3202befe3d45386d30c51399a7e9e413509fec982a120a5ab6ae22609c0e975d6fab33658decb0f2cf1c8dfb75434c68bfa76ad4f6602d10ad5a84
 
 install : $(TARGET)