Lynis performs a scan of your system to check for common vulnerabilities or opportunities for hardening, then generates a report based on the findings. It’s pretty quick and there is a lot of interesting information in the report.
Only two commands required to check it out. Install the package:
sudo pacman -S lynis
Then run the scan.
sudo lynis audit system
That’s it!
By the way, most terminals support Shift+PgUp/PgDn for paging up and down through the output, if you are like me and get tired of whipping the scroll wheel (the output is fairly lengthy).
My initial scan scored 64 out of (I assume) 100:
Lynis security scan details:
Hardening index : 64 [############ ]
Tests performed : 246
Plugins enabled : 0
Admittedly, this computer is less hardened than my laptop, but still I would have guessed it would do better!
I am not going to implement all of the 33 suggestions they put in my report, but I will definitely read through them and at least address whatever seems critical or easy to fix, to try and batten down the hatches a bit.
I appreciate that the report is easy to read through and understand. Each suggestion in the report has a URL or two that links to an article on the CISOfy website, or a post in the blog they sponsor. It’s a nice touch in my opinion, because it makes it easy to get more information (for example if you have no idea what they are talking about ).
PS: I do see Lynis was already mentioned in this topic1, but it was almost five years ago so I figured no harm in mentioning it again.
Not sure you’d call this an application (depends on your definitions), but while needing to observe ‘quiet time’ while everyone else is asleep, I installed a host monitoring tool, ‘beszel’ and am quite impressed with the implementation so far, very light footprint it seems. Beszel HomePage
Now, with only one server do I really need monitoring, no, probably not..but it’s cool
One thing I found funny is that on reddit (where I found it), someone referenced how hard it was to install/configure. I found it quite a snap, though I did have to manualize (is that a word I just made up) some of the steps for some reason during installation and had to edit exactly one file with three or four characters added to it. lol
Interesting, I’ve hit the very same score. Seems like that score does apply to most installs of EndeavourOS ?
But based on the suggestions which I’ve got… that would require some research if it’s really required for my use cases.
At least for the warnings it’s clear what I’ve got to do.
In comparison to the octopi-notifier which I’ve used until now, it also includes a list of the package updates available and in addition to that, you could keep the installed KDE widgets you’re using up to date.
Quite nice, thanks for that find @Beiruty ! And check his video linked in the topic above for further details.
Edit: Sorry @sempterobit I once again used the wrong reply button, didn’t meant to compose a direct reply to your post. Maybe sometime I’ll learn it to use the other buttom down below for general replies…
@1093i3511 You are most welcome. I hope to share more apps that I find useful or interesting.
A good one is the modified (fork) of the system monitor that can produce system usage charts as a widget in the main KDE panel.
Thanks, but I prefer it lightweight within the terminal and currently use bottom (btm) for that purpose.
In short, I’m using KDE Plasma, yes. But I’ll eventually switch to SWAY or Openbox in the future. Sadly SWAY didn’t worked in a VM the last time I’ve tried and therefore my plans towards that came to a halt.
In short, there are many KDE widgets which are purely decorative. Apdatifier on the other hand has practical uses. Too bad it’s only widget which isn’t listed in the AUR and only can be installed via the KDE store or github.
I guess you could call it a CLI application. Anyways, new discovery for me.
slabtop
slabtop displays detailed kernel slab cache information in real time. It displays a listing of
the top caches sorted by one of the listed sort criteria. It also displays a statistics header
filled with slab layer information.
).
