
================================================================================

  Lynis - To Do

================================================================================

  Author:                   Michael Boelen (michael@rootkit.nl)
  Description:              Security and system auditing tool
  Website:                  http://www.rootkit.nl/projects/lynis.html
  Development start:        May 2007
  Support policy:           See section 'Support' (README file)
  Documentation:            See web site, README, FAQ and CHANGELOG file

================================================================================

[+] Project
-------------------------------
  - Complete documentation
  - Create ports/packages for FreeBSD, Fedora/CentOS (or better: package maintainers!)
  

[+] General
-------------------------------
  - Split up tests to seperated files  
  - Output test results to column width
  - Activate warning when default profile is being used


[+] Installation
-------------------------------
  

[+] Forensics
-------------------------------
  - Add MD5/SHA1 database


[+] Generic Tests
-------------------------------
  - Improve test to find home directories, by reading the passwd file
  - Check /etc/issue and /etc/motd (symlink)
  - NFS: Check if there is no localhost line in the /etc/export file
  - Check /etc/crontab entries (permissions, locations)
  - Search for all setuid/setgid files and compare against baseline
  - Skel: Red Hat files are hidden, check with ls -al?
  - Shell history files: check only 1 level deep, after searching home directories
  - Update test: gives 'too many arguments' when no internet connection is available
  - Add MacOS X test for /tmp dir (or redirect location of symlink)
  - MacOS X doesn't understand echo -e, filter out
  

[+] Software Tests
-------------------------------
  - Sendmail: check banner, check file permissions of configuration files
  - Exim: check banner
  - SMTP (if running): check if a version shows up in banner
  

[+] Reporting
-------------------------------
  - Add possibility to mail directly (instead of log to file)
  - Find audit templates for reporting (direct post to webserver?)


[+] Visual
-------------------------------


================================================================================
 Lynis - Copyright 2007-2008, Michael Boelen - The Netherlands
 http://www.rootkit.nl
