diff --git a/lynis_report.pl b/lynis_report.pl index b2b94e6..d0f3882 100755 --- a/lynis_report.pl +++ b/lynis_report.pl @@ -397,7 +397,21 @@ END hostid:$lynis_report_data{'hostid'} hostid:$lynis_report_data{'hostid2'} - +END + print OUT "\t\t\t\t\tPlugin-firewall iptables list:".join("
\n", @{$lynis_report_data{'plugin_firewall_iptables_list'}})."\n"; + print OUT "\t\t\t\t\n"; + if ((exists($lynis_report_data{'plugin_processes_allprocesses'})) and ($lynis_report_data{'plugin_processes_allprocesses'} ne "")) { + print OUT "\t\t\t\t

Plugin-processes: discovered processes:

\n"; + if (ref($lynis_report_data{'plugin_processes_allprocesses'}) eq 'ARRAY') { + print OUT "\t\t\t\t\t\n"; + } else { + warn colored("plugin processess allprocesses object not an array! \n", "yellow"); + print Dumper($lynis_report_data{'plugin_processes_allprocesses'}); + } + } + print OUT <

host info:

@@ -450,7 +464,7 @@ END binary paths:$lynis_report_data{'binary_paths'} END - print OUT "\t\t\t\t\t\tcertificates:".join("
\n",$lynis_report_data{'valid_certificate[]'})."\n"; + print OUT "\t\t\t\t\t\tcertificates:".join("
\n",@{$lynis_report_data{'valid_certificate[]'}})."\n"; print OUT < @@ -500,9 +514,7 @@ END print OUT "\t\t\t\t\tipv4 addresses:".join("
\n", @{$lynis_report_data{'network_ipv4_address[]'}})."\n"; print OUT "\t\t\t\t\tipv6 addresses:".join("
\n", @{$lynis_report_data{'network_ipv6_address[]'}})."\n"; print OUT "\t\t\t\t\tDefault Gateway$lynis_report_data{'default_gateway[]'}\n"; - print OUT < -END + print OUT "\t\t\t\t\t\n"; #print STDERR "Should be ARRAY: |".ref($lynis_report_data{'network_mac_address[]'})."|\n"; if (ref($lynis_report_data{'network_mac_address[]'}) eq "ARRAY") { print OUT "\t\t\t\t\t\tMAC Address:".join("
\n", @{$lynis_report_data{'network_mac_address[]'}})."\n"; @@ -513,6 +525,18 @@ END } print OUT <Name Cache Used:$to_bool{$lynis_report_data{'name_cache_used'}} + + + resolv.conf search domain: +END + if (exists($lynis_report_data{'resolv_conf_search_domain[]'})) { + if (ref($lynis_report_data{'resolv_conf_search_domain[]'}) eq 'ARRAY') { + print OUT "\t\t\t\t\t\t".join("
\n",@{$lynis_report_data{'resolv_conf_search_domain[]'}})."\n"; + } else { + print OUT "\t\t\t\t\t\t\n"; + } + } + print OUT <

Open Ports:

@@ -921,7 +945,7 @@ END close OUT or die colored("There was a problem closing the output file ($output): $! \n", "bold red"); - my @indexes = qw( lynis_version lynis_tests_done lynis_update_available license_key report_datetime_start report_datetime_end plugins_directory plugins_enabled finish report_version_major report_version_minor hostid hostid2 plugin_enabled_phase1[] hardening_index warning[] hostname domainname linux_kernel_version linux_config_file memory_size nameserver[] network_interface[] framework_grsecurity vm vmtype uptime_in_seconds linux_kernel_release os framework_selinux uptime_in_days resolv_conf_domain os_fullname default_gateway[] cpu_nx cpu_pae linux_version os_version network_ipv6_address[] boot_loader suggestion[] manual manual[] linux_version cpu_pae cpu_nx network_ipv4_address[] network_mac_address[] os_name os_kernel_version os_kernel_version_full firewall_installed max_password_retry password_max_days password_min_days pam_cracklib password_strength_tested minimum_password_length package_audit_tool package_audit_tool_found vulnerable_packages_found firewall_active firewall_software[] firewall_software auth_failed_logins_logged authentication_two_factor_enabled memory_units default_gateway authentication_two_factor_required malware_scanner_installed file_integrity_tool_installed file_integrity_tool_installed pam_module[] ids_ips_tooling[] ipv6_mode ipv6_only name_cache_used ldap_pam_enabled ntp_daemon_running mysql_running ssh_daemon_running dhcp_client_running arpwatch_running running_service[] audit_daemon_running installed_packages binaries_count installed_packages_array crond_running network_listen_port[] firewall_empty_ruleset automation_tool_present automation_tool_running[] file_integrity_tool ldap_auth_enabled password_max_l_credit password_max_u_credit password_max_digital_credit password_max_other_credit loaded_kernel_module[] plugin_directory package_manager[] linux_kernel_io_scheduler[] linux_kernel_type details[] available_shell[] locate_db smtp_daemon pop3_daemon ntp_daemon imap_daemon printing_daemon boot_service[] boot_uefi_boot_secure linux_default_runlevel boot_service_tool boot_uefi_booted systemctl_exit_code min_password_class session_timeout_enabled compiler_installed real_user[] home_directory[] swap_partition[] filesystem_ext[] journal_disk_size journal_coredumps_lastday journal_oldest_bootdate journal_contains_errors swap_partition[] file_systems_ext[] test_category test_group scheduler[] journal_meta_data boot_uefi_booted_secure service_manager running_service_tool binary_paths valid_certificate[] cronjob[] log_directory[] open_logfile[] journal_bootlogs log_rotation_tool log_rotation_config_found auditor deleted_file[] vulnerable_package[] malware_scanner[] file_integrity_tool[] ); + my @indexes = qw( lynis_version lynis_tests_done lynis_update_available license_key report_datetime_start report_datetime_end plugins_directory plugins_enabled finish report_version_major report_version_minor hostid hostid2 plugin_enabled_phase1[] hardening_index warning[] hostname domainname linux_kernel_version linux_config_file memory_size nameserver[] network_interface[] framework_grsecurity vm vmtype uptime_in_seconds linux_kernel_release os framework_selinux uptime_in_days resolv_conf_domain os_fullname default_gateway[] cpu_nx cpu_pae linux_version os_version network_ipv6_address[] boot_loader suggestion[] manual manual[] linux_version cpu_pae cpu_nx network_ipv4_address[] network_mac_address[] os_name os_kernel_version os_kernel_version_full firewall_installed max_password_retry password_max_days password_min_days pam_cracklib password_strength_tested minimum_password_length package_audit_tool package_audit_tool_found vulnerable_packages_found firewall_active firewall_software[] firewall_software auth_failed_logins_logged authentication_two_factor_enabled memory_units default_gateway authentication_two_factor_required malware_scanner_installed file_integrity_tool_installed file_integrity_tool_installed pam_module[] ids_ips_tooling[] ipv6_mode ipv6_only name_cache_used ldap_pam_enabled ntp_daemon_running mysql_running ssh_daemon_running dhcp_client_running arpwatch_running running_service[] audit_daemon_running installed_packages binaries_count installed_packages_array crond_running network_listen_port[] firewall_empty_ruleset automation_tool_present automation_tool_running[] file_integrity_tool ldap_auth_enabled password_max_l_credit password_max_u_credit password_max_digital_credit password_max_other_credit loaded_kernel_module[] plugin_directory package_manager[] linux_kernel_io_scheduler[] linux_kernel_type details[] available_shell[] locate_db smtp_daemon pop3_daemon ntp_daemon imap_daemon printing_daemon boot_service[] boot_uefi_boot_secure linux_default_runlevel boot_service_tool boot_uefi_booted systemctl_exit_code min_password_class session_timeout_enabled compiler_installed real_user[] home_directory[] swap_partition[] filesystem_ext[] journal_disk_size journal_coredumps_lastday journal_oldest_bootdate journal_contains_errors swap_partition[] file_systems_ext[] test_category test_group scheduler[] journal_meta_data boot_uefi_booted_secure service_manager running_service_tool binary_paths valid_certificate[] cronjob[] log_directory[] open_logfile[] journal_bootlogs log_rotation_tool log_rotation_config_found auditor deleted_file[] vulnerable_package[] malware_scanner[] file_integrity_tool[] plugin_firewall_iptables_list plugin_processes_allprocesses resolv_conf_search_domain[] linux_amount_of_kernels ); foreach my $idx ( sort @indexes ) { delete($lynis_report_data{$idx}); }