Ubuntu
checksecurity package

checksecurity 2.0.16+nmu1ubuntu1 source package in Ubuntu

Changelog

checksecurity (2.0.16+nmu1ubuntu1) xenial; urgency=medium

  * Merge from Debian unstable (LP: #1555357). Remaining changes:
    - Downgrade all Recommends to Suggests.
  * Do not downgrade logcheck to Suggests, it is in main.
  * Remove fcron from Depends, it is not in the archive.

checksecurity (2.0.16+nmu1) unstable; urgency=medium

  * Non-maintainer upload.
  * Use "find -perm /x" instead of "find -perm +x". Closes: #731944

checksecurity (2.0.16) unstable; urgency=medium

  * plugins/check-setuid: Prevent error from find by putting
    -ignore_readdir_race as first option (Closes: 714152)
  * plugins/check-iptables-logs, man/check-iptables-logs.8: Add new plugin to
    check for iptables logs and provide information of attacked ports,
    blacklisted hosts (using fail2ban), etc.
  * etc/global-checksecurity.conf: Add information for the new plugin, this is
    disabled by default (as systems might not have iptables configured and,
    even if enabled, there might not be a log target)
  * man/{check-diskfree.8,check-passwd.8,check-setuid.8}: Clarify that these
    plugins are written to be run by checksecurity. Some of the plugins might
    not work if missing some environment variables (which are defined by
    checksecurity)
  * man/checksecurity.8: Add a reference to the new plugin check-iptables-logs
  * debian/control: Improve the package description with the recommendations
    made by Justin B Rye (Closes: #688070)
  * debian/control: Add debsecan to the Recommends, this provides notification
    of vulnerabilities in the system and security updates (Closes: #253097)
  * etc/check-setuid.conf: Exclude more filesystems for the setuid checks as
    are system based filesystems
  * debian/po/tr.po: Add Turkish translation provided by Mert Dirik
    (Closes: #759874)

 -- Nishanth Aravamudan <email address hidden>  Wed, 09 Mar 2016 12:45:49 -0800

Upload details

Uploaded by:
Nish Aravamudan
Sponsored by:
Marc Deslauriers
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal release main admin
Bionic release main admin
Xenial release main admin

Builds

Xenial: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
checksecurity_2.0.16+nmu1ubuntu1.tar.gz 32.4 KiB 5cc4af77ea90431978ad9709227dcc0e3873bb1c6e733a934aae8f79f8d4a15a
checksecurity_2.0.16+nmu1ubuntu1.dsc 1.5 KiB 572adb2263b930296d4e65f8f1bc869a161fddc88d9715804331bca04a571bb5

View changes file

Binary packages built by this source

checksecurity: basic system security checks

 Checksecurity can periodically do some very basic system security checks:
 .
    * check-setuid - scans for insecurely mounted remote file systems,
      and tracks changes in setuid programs;
    * check-sockets - tracks changes in open ports to detect rogue programs;
    * check-passwd - scans for empty or duplicate system accounts;
    * check-disfree - scans for mounted filesystems nearing capacity;
    * check-iptables-logs - scans logs generated by iptables and look
      for intrusion attempts.
 .
 Be aware that these minimal set of checks are no substitute for a full
 security auditing and integrity checking system.
 .
 In addition to these checks you are encourage to install additional packages
 (listed in "Recommends") to provide more information concerning the security
 or vulnerability of your system.
 .
 Installing the suggested package lockfile-progs can help to prevent
 the cron jobs running multiple times if something gets jammed.