
================================================================================

  Lynis - To Do

================================================================================

  Author:                   Michael Boelen (michael@rootkit.nl)
  Description:              Security and system auditing tool
  Website:                  http://www.rootkit.nl/projects/lynis.html
  Support policy:           See section 'Support' (README file)
  Documentation:            See web site, README, FAQ and CHANGELOG file

================================================================================

[+] Project
-------------------------------
  - Complete documentation
  - Create ports/packages for FreeBSD, Fedora/CentOS (or better: package maintainers!)
  

[+] General
-------------------------------
  - Output test results to column width
  - Activate warning when default profile is being used


[+] Forensics
-------------------------------
  - Add MD5/SHA1 database


[+] Generic Tests
-------------------------------
  - Improve test to find home directories, by reading the passwd file
  - Check /etc/issue and /etc/motd (symlink)
  - NFS: Check if there is no localhost line in the /etc/export file
  - Check /etc/crontab entries (permissions, locations)
  - Search for all setuid/setgid files and compare against baseline
  - Skel: Red Hat files are hidden, check with ls -al?
  - Shell history files: check only 1 level deep, after searching home directories
  - Update test: gives 'too many arguments' when no internet connection is available
  - Add MacOS X test for /tmp dir (or redirect location of symlink)
  - MacOS X doesn't understand echo -e, filter out
  - Samba: make sure it does listen only at one interface (not at WAN)
  
  
[+] Databases
-------------------------------
  - Warn if MySQL is running on a network interface
  - Check Oracle things (tm)


[+] DNS
-------------------------------
  - Bind: check if version is disabled  


[+] MTA
-------------------------------
  - Sendmail: check banner, check file permissions of configuration files
  - Exim: check banner
  - SMTP (if running): check if a version shows up in banner
  

[+] Reporting
-------------------------------
  - Add possibility to mail directly (instead of log to file)
  - Find audit templates for reporting (direct post to webserver?)


================================================================================
 Lynis - Copyright 2007-2008, Michael Boelen - The Netherlands
 http://www.rootkit.nl
