{"id":11913,"date":"2021-11-15T09:04:32","date_gmt":"2021-11-15T09:04:32","guid":{"rendered":"https:\/\/linuxways.net\/?p=11913"},"modified":"2021-11-16T13:14:43","modified_gmt":"2021-11-16T13:14:43","slug":"how-to-install-lynis-security-auditing-tool-on-ubuntu-20-04","status":"publish","type":"post","link":"https:\/\/linuxways.net\/de\/ubuntu\/how-to-install-lynis-security-auditing-tool-on-ubuntu-20-04\/","title":{"rendered":"How to install Lynis security auditing tool on Ubuntu 20.04"},"content":{"rendered":"

Lynis is an open-source security auditing tool used for in-depth system-wide security scans. It provides useful information about vulnerabilities in your system and suggestions on how to improve security. Lynis allows you to easily scan your system features such as application patch management, ports, file system, kernel, databases, and much more. System admins and security professionals can scan systems extensively in a very short time.<\/p>\n

Lynis can be used in both enterprise environments and on small and medium enterprises.<\/p>\n

In this article, I will explain how to install and use Lynis on Ubuntu 20.04<\/p>\n

Step 1: Check version available in repo<\/h2>\n

First, let’s check the Lynis version available in the Ubuntu 20.04 repo. Run:<\/p>\n

\r\n$ apt-cache policy lynis\r\n<\/pre>\n
<\/strong><\/p>\n
As you can see, the Lynis v2.6.2 is available in the ubuntu universe repos. By the time of writing this tutorial, Lynis 3.0.6 is the current stable release version.<\/p>\n
You can download the latest release from the Lynis community software repository.<\/p>\n
Step 2: Install PGP key & Repo.<\/h2>\n
First, download and add the PGP signing key from a central keyserver. Execute the commands:<\/p>\n
\r\n$ wget -O - https:\/\/packages.cisofy.com\/keys\/cisofy-software-public.key | sudo apt-key add -\r\n<\/pre>\n
Next, add the Lynis repository to the system package repository list as shown:<\/p>\n
\r\n$ echo \"deb https:\/\/packages.cisofy.com\/community\/lynis\/deb\/ stable main\" | sudo tee \/etc\/apt\/sources.list.d\/cisofy-lynis.list\r\n<\/pre>\n
To use Lynis with only English, disable translations from being downloaded as shown:<\/p>\n
\r\n$ echo 'Acquire::Languages \"none\";' | sudo tee \/etc\/apt\/apt.conf.d\/99disable-translations<\/pre>\n
Step 3: Update Packages<\/h2>\n
Next, update the system packages before proceeding with the installation. Run the commands:<\/p>\n
\r\n$ sudo apt install apt-transport-https\r\n\r\n$ sudo apt update\r\n<\/pre>\n
Step 4: Install Lynis<\/h2>\n
Now we are ready to install Lynis on our system. Execute the command:<\/p>\n
\r\n$ sudo apt install lynis\r\n<\/pre>\n
Once the installation is done, confirm the Lynis version installed on your system as shown:<\/p>\n
\r\n$ lynis show version\r\n<\/pre>\n
<\/strong><\/p>\n
Step 5: Lynis Command Line Syntax and Options<\/h2>\n
Now that the latest version of Lynis is installed, let\u2019s learn how to use this tool to audit the system. The syntax of the Lynis command is as follows:<\/p>\n
\r\n$ lynis [scan mode] [other options]\r\n<\/pre>\n
We can view the Lynis commands as shown:<\/p>\n
\r\n$ lynis show commands\r\n<\/pre>\n
<\/strong><\/p>\n
To view settings run:<\/p>\n
\r\n$ lynis show settings\r\n<\/pre>\n
<\/strong><\/p>\n
Step 6: Auditing a Linux System Using Lynis<\/h2>\n
Let’s proceed and perform a system audit on the machine. Run the following command:<\/p>\n
\r\n$ sudo lynis audit system\r\n<\/pre>\n
During the auditing process, Lynis executes tests and generates output separated into many areas such as security, suggestions, file system, test result, debug information, and so on. The auditing report is saved to \/var\/log\/lynis-report.dat, and all test and debug information is written to \/var\/log\/lynis.log. The report file contains general information on the system application, server vulnerable packages, and so forth. The prior test results will be overwritten each time you perform a new system audit.<\/p>\n
The example below displays several auditing results labeled by keywords such as Enabled, Found, Not Found, Ok, Suggestion, etc. Any output with the Warning keyword needs to be checked and fixed.<\/p>\n
<\/p>\n
System Audit Output<\/p>\n
<\/p>\n
Lynis provided suggestions at the end of the auditing on how to harden your system.<\/p>\n
<\/p>\n
Display Details of a Specific Test or Suggestion<\/h2>\n
Each system check has a unique test ID. If you require additional information about a certain test, use the command below and its ID and display further information.<\/p>\n
\r\n$ lynis show details TEST-ID\r\n<\/pre>\n
In this example, we will find out more about a test with a suggestion from Lynis.<\/p>\n
\r\n$ lynis show details HRDN-7222\r\n<\/pre>\n
<\/p>\n
We have learned how to install and use the Lynis tool to audit our Ubuntu system. For further information on how to use it, check out the official site.<\/a><\/p>","protected":false},"excerpt":{"rendered":"
Lynis is an open-source security auditing tool used for in-depth system-wide security scans. It provides useful information about vulnerabilities in your system and suggestions on how to improve…<\/p>","protected":false},"author":1,"featured_media":11942,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-11913","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ubuntu"],"_links":{"self":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/11913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/comments?post=11913"}],"version-history":[{"count":0,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/posts\/11913\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media\/11942"}],"wp:attachment":[{"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/media?parent=11913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/categories?post=11913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxways.net\/de\/wp-json\/wp\/v2\/tags?post=11913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}