LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Lynis result with SUSE Tumbleweed (https://www.linuxquestions.org/questions/linux-security-4/lynis-result-with-suse-tumbleweed-4175706376/)

steveis2 01-14-2022 11:26 AM

Lynis result with SUSE Tumbleweed
 
Hi
I thought I'd learn something about Linux security and tried out Lynis 3.0.6 on my SUSE Tumbleweed installation. However now I'm a bit confused.
After a scan many tests seem to be deprecated. Is this because there's something wrong with my SUSE installation or something to do with Lynis? A recurring item seems to be logtext, whatever that is. And the first section seems a bit alarming??

Regards Steve

Here's the section of the results that shows things as deprecated.

[+] System Tools
------------------------------------

[WARNING]: Deprecated function used (report)

- Starting dbus policy check...

[WARNING]: Deprecated function used (logtext)

Warning: Package iio-sensor-proxy-3.3-1.2.x86_64 installs an unknown D-BUS autostart/system service: net.hadess.SensorProxy.conf [ WARNING ]
Warning: Package sddm-0.19.0-4.5.x86_64 installs an unknown D-BUS autostart/system service: sddm_org.freedesktop.DisplayManager.conf [ WARNING ]
Warning: Package bluez-5.62-2.2.x86_64 installs an unknown D-BUS autostart/system service: org.bluez.service [ WARNING ]
Warning: Package flatpak-1.12.2-2.2.x86_64 installs an unknown D-BUS autostart/system service: org.freedesktop.Flatpak.SystemHelper.service [ WARNING ]
Warning: Package bolt-0.9.1-2.2.x86_64 installs an unknown D-BUS autostart/system service: org.freedesktop.bolt.service [ WARNING ]
Warning: Package fwupd-1.7.3-1.3.x86_64 installs an unknown D-BUS autostart/system service: org.freedesktop.fwupd.service [ WARNING ]
Warning: Package systemd-249.7-3.1.x86_64 installs an unknown D-BUS autostart/system service: org.freedesktop.timesync1.service [ WARNING ]
Warning: Package kdenetwork-filesharing-21.12.1-1.1.x86_64 installs an unknown D-BUS autostart/system service: org.kde.filesharing.samba.service [ WARNING ]
Warning: Package kwalletmanager5-21.12.1-1.1.x86_64 installs an unknown D-BUS autostart/system service: org.kde.kcontrol.kcmkwallet5.service [ WARNING ]
Warning: Package kcm_sddm-5.23.5-1.1.x86_64 installs an unknown D-BUS autostart/system service: org.kde.kcontrol.kcmsddm.service [ WARNING ]
Warning: Package plasma5-disks-5.23.5-1.1.x86_64 installs an unknown D-BUS autostart/system service: org.kde.kded.smart.service [ WARNING ]
Warning: Package powerdevil5-5.23.5-1.1.x86_64 installs an unknown D-BUS autostart/system service: org.kde.powerdevil.chargethresholdhelper.service [ WARNING ]
Warning: Package powerdevil5-5.23.5-1.1.x86_64 installs an unknown D-BUS autostart/system service: org.kde.powerdevil.discretegpuhelper.service [ WARNING ]
Warning: Package snapper-0.9.0-7.3.x86_64 installs an unknown D-BUS autostart/system service: org.opensuse.Snapper.service [ WARNING ]

[WARNING]: Deprecated function used (wait_for_keypress)


[+] Users, Groups and Authentication
------------------------------------

[WARNING]: Deprecated function used (report)

- Starting password check for users...

[WARNING]: Deprecated function used (logtext)


[WARNING]: Deprecated function used (wait_for_keypress)


[+] Binary integrity
------------------------------------

[WARNING]: Deprecated function used (report)

- Starting binary RPATH check...

[WARNING]: Deprecated function used (logtext)

No bad RPATH usage found in 8767 executables [ OK ]

[WARNING]: Deprecated function used (wait_for_keypress)


[+] File systems
------------------------------------

[WARNING]: Test BINARY-1000 had a long execution: 54.368534 seconds

- Starting look-up of symlinks in /tmp...

[WARNING]: Deprecated function used (logtext)


[WARNING]: Deprecated function used (wait_for_keypress)


[+] File systems
------------------------------------
- Starting file permissions check for world-writeable files...

[WARNING]: Deprecated function used (logtext)

/tmp is world-writeable [ WARNING ]

[WARNING]: Deprecated function used (wait_for_keypress)


[+] Memory and processes
------------------------------------
- Starting look-up of 'nobody' processes...

[WARNING]: Deprecated function used (logtext)


[WARNING]: Deprecated function used (wait_for_keypress)


[+] Networking
------------------------------------
- Starting verifying open network ports (22 25 80 111 443)...

[WARNING]: Deprecated function used (logtext)


[WARNING]: Deprecated function used (logtext)

Open port 631 not allowed [ WARNING ]

[WARNING]: Deprecated function used (wait_for_keypress)

Jan K. 01-14-2022 01:23 PM

One on github solved it by purging (old install making trouble?) https://github.com/CISOfy/lynis/issues/733

steveis2 01-15-2022 11:29 AM

Quote:

Originally Posted by Jan K. (Post 6318194)
One on github solved it by purging (old install making trouble?) https://github.com/CISOfy/lynis/issues/733

Hi Thanks for your reply.
I think this might have been the problem. I uninstalled the program and checked for stray files. Then I used the cisofy repository to install lynis. This worked fine.

Regards Steve


All times are GMT -5. The time now is 12:00 PM.