Package: checksecurity (2.0.16+nmu1)

[ Source: checksecurity  ]

basic system security checks

Checksecurity can periodically do some very basic system security checks:

   * check-setuid  - scans for insecurely mounted remote file systems,
     and tracks changes in setuid programs;
   * check-sockets - tracks changes in open ports to detect rogue programs;
   * check-passwd  - scans for empty or duplicate system accounts;
   * check-disfree - scans for mounted filesystems nearing capacity;
   * check-iptables-logs -  scans logs generated by iptables and look
     for intrusion attempts.

Be aware that these minimal set of checks are no substitute for a full security auditing and integrity checking system.

In addition to these checks you are encourage to install additional packages (listed in "Recommends") to provide more information concerning the security or vulnerability of your system.

Installing the suggested package lockfile-progs can help to prevent the cron jobs running multiple times if something gets jammed.

Tags: Implemented in: Perl, User Interface: Command Line, Role: role::program, scope::utility, Security: Intrusion Detection, Purpose: Scanning

Other Packages Related to checksecurity

• dep: cron (>= 3.0pl1-74)

  Daemon de agendamento de processos
  also a virtual package provided by bcron

  or anacron

  cron-like program that doesn't go by time
  also a virtual package provided by systemd-cron

  or fcron

  Package not available

• dep: debconf (>= 0.5)

  Sistema de manutenção da configuração da Debian

  or debconf-2.0

  virtual package provided by cdebconf, cdebconf-udeb, debconf

• dep: perl (>= 5.8.0)

  Larry Wall's Practical Extraction and Report Language

• dep: util-linux (>= 2.15~rc1-1)

  Utilitários diversos de sistema

• rec: debsecan

  Analizador de Segurança da Debian

• rec: logcheck

  envia por mail anomalias no sistema de ficheiros de log para o administrador

• rec: tiger

  Report system security vulnerabilities

• rec: tripwire

  Verificador de integridade de ficheiros e directórios

  or integrit

  Um programa de verificação de integridade de ficheiros

  or aide

  Ambiente de Deteccão de Intrusos Avançado - binário estático

  or samhain

  Sistema de alerta de integridade de dados e intrusão em máquina

  or fcheck

  verificador de integridade IDS de sistemas de ficheiros baseado em linha de comandos

• sug: apt-watch

  Package not available

  or cron-apt

  automatic update of packages using apt-get

• sug: lockfile-progs

  Programas para bloquear e desbloquear ficheiros e caixas de correio (mail)

Download checksecurity

Download for all available architectures

Architecture	Package Size	Installed Size	Files
all	26.2 kB	82.0 kB	[list of files]