Published at LXer:

When I read Gaurav Kamathe[he]#039[/he]s article Scan your Linux security with Lynis, it reminded me of my time as a systems administrator for the US*Department of Labor.*One of my duties was to keep our Unix servers hardened. Each quarter, an independent verifier came in to review our servers[he]#039[/he] security status. Each time on the day the verifier was scheduled to arrive, I ran Security Readiness Review (SRR), a scanning tool that used a large set of scripts to identify and report any security findings.

Read More...