
================================================================================

  Lynis - To Do

================================================================================

  Author:                   Michael Boelen (michael@rootkit.nl)
  Description:              Security and system auditing tool
  Website:                  http://www.rootkit.nl/projects/lynis.html
  Support policy:           See section 'Support' (README file)
  Documentation:            See web site, README, FAQ and CHANGELOG file

================================================================================

[+] Project
-------------------------------
  - Create ports/packages for FreeBSD
  

[+] General
-------------------------------
  - Activate warning when default profile is being used


[+] Forensics
-------------------------------
  - Add MD5/SHA1 database


[+] Generic Tests
-------------------------------
  - NFS: Check if there is no localhost line in the /etc/export file
  - Check /etc/crontab entries (permissions, locations)
  - Search for all setuid/setgid files and compare against baseline
  - Skel: Red Hat files are hidden, check with ls -al?
  - Add MacOS X test for /tmp dir (or redirect location of symlink)
  - Samba: make sure it does listen only at one interface (not at WAN)
  - Cleanup some tests by combining options (like NETW-3006)
  - Check for latest versions of programs
  - Check if multiple users have group '0'
  - When using --quiet, use long warnings instead of default lines
  - Don't show section headers when using --tests
  
  
[+] Databases
-------------------------------
  - Warn if MySQL is running on a network interface
  - Check for empty root login
  - Check Oracle things (tm)


[+] DNS
-------------------------------
  - Bind: check if version is disabled  


[+] MTA
-------------------------------
  - Sendmail: check banner, check file permissions of configuration files
  - Exim: check banner
  - SMTP (if running): check if a version shows up in banner


[+] Printers/spools
-------------------------------
  - Printcap consistency check for Linux/Solaris/MacOS


[+] Reporting
-------------------------------
  - Add possibility to mail directly (instead of log to file)
  - Find audit templates for reporting (direct post to webserver?)


================================================================================
 Lynis - Copyright 2007-2008, Michael Boelen - The Netherlands
 http://www.rootkit.nl
