Mastering Linux Security and Hardening - Second Edition

Hands-on lab – scanning kernel parameters with Lynis

Lynis is in the normal repositories for Ubuntu and in the EPEL repository for CentOS. It's always a few versions behind what you can get directly from the author's website, but for now, that's okay. When we get to Chapter 13, Vulnerability Scanning and Intrusion Detection, I'll show you how to get the newest version. Let's get started:

1. Install Lynis from the repository by doing the following for Ubuntu:

sudo apt updatesudo apt install lynis

Do the following for CentOS 07:

sudo yum install lynis

Do the following for CentOS 08:

sudo dnf install lynis

2. Scan the system by using the following command:

sudo lynis audit system

3. When the scan completes, scroll back up to the [+] Kernel Hardening ...