Package: checksecurity (2.0.16+nmu1)

[ Source: checksecurity  ]

basic system security checks

Checksecurity can periodically do some very basic system security checks:

   * check-setuid  - scans for insecurely mounted remote file systems,
     and tracks changes in setuid programs;
   * check-sockets - tracks changes in open ports to detect rogue programs;
   * check-passwd  - scans for empty or duplicate system accounts;
   * check-disfree - scans for mounted filesystems nearing capacity;
   * check-iptables-logs -  scans logs generated by iptables and look
     for intrusion attempts.

Be aware that these minimal set of checks are no substitute for a full security auditing and integrity checking system.

In addition to these checks you are encourage to install additional packages (listed in "Recommends") to provide more information concerning the security or vulnerability of your system.

Installing the suggested package lockfile-progs can help to prevent the cron jobs running multiple times if something gets jammed.

Tags: Implemented in: Perl, User Interface: Command Line, Role: role::program, scope::utility, Security: Intrusion Detection, Purpose: Scanning

Other Packages Related to checksecurity

• dep: cron (>= 3.0pl1-74)

  process scheduling daemon
  also a virtual package provided by bcron

  or anacron

  cron-like program that doesn't go by time
  also a virtual package provided by systemd-cron

  or fcron

  Package not available

• dep: debconf (>= 0.5)

  Debian configuration management system

  or debconf-2.0

  virtual package provided by cdebconf, cdebconf-udeb, debconf

• dep: perl (>= 5.8.0)

  Larry Wall's Practical Extraction and Report Language

• dep: util-linux (>= 2.15~rc1-1)

  miscellaneous system utilities

• rec: debsecan

  Debian Security Analyzer

• rec: logcheck

  mails anomalies in the system logfiles to the administrator

• rec: tiger

  Report system security vulnerabilities

• rec: tripwire

  file and directory integrity checker

  or integrit

  A file integrity verification program

  or aide

  Advanced Intrusion Detection Environment - static binary

  or samhain

  Data integrity and host intrusion alert system

  or fcheck

  IDS filesystem baseline integrity checker

• sug: apt-watch

  Package not available

  or cron-apt

  automatic update of packages using apt-get

• sug: lockfile-progs

  Programs for locking and unlocking files and mailboxes

Download checksecurity

Download for all available architectures

Architecture	Package Size	Installed Size	Files
all	26.2 kB	82.0 kB	[list of files]