# Lynis Report report_version_major=1 report_version_minor=0 report_datetime_start=2021-01-07 17:58:08 auditor=[Not Specified] lynis_version=3.0.3 os=Linux os_name=Ubuntu os_fullname=Ubuntu 16.04.7 LTS os_version=16.04 linux_version=Ubuntu os_kernel_version=4.4.0 os_kernel_version_full=4.4.0-197-generic hostname=it-sec-test-vm test_category=all test_group=all plugin_directory=./plugins lynis_update_available=0 binaries_count=1077 binaries_suid_count=/bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/chfn /usr/bin/chsh /usr/bin/gpasswd /usr/bin/newgrp /usr/bin/passwd /usr/bin/procmail /usr/bin/sg /usr/bin/sudo /usr/bin/sudoedit /usr/sbin/sensible-mda binaries_sgid_count=/sbin/pam_extrausers_chkpwd /sbin/unix_chkpwd /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/dotlockfile /usr/bin/expiry /usr/bin/lockfile /usr/bin/procmail /usr/bin/ssh-agent /usr/bin/wall /usr/bin/write /usr/sbin/hoststat /usr/sbin/purgestat /usr/sbin/sendmail /usr/sbin/sendmail-msp /usr/sbin/sendmail-mta binary_paths=/usr/local/games,/usr/games,/bin,/sbin,/usr/bin,/usr/sbin,/usr/local/bin,/usr/local/sbin vm=1 vmtype=kvm container=0 systemd=1 plugin_enabled_phase1[]=pam|1.0.5| authentication_two_factor_enabled=0 authentication_two_factor_required=0 minimum_password_length=8 password_strength_tested=1 min_password_class=0 password_max_digital_credit=1 password_max_l_credit=1 password_max_other_credit=1 password_max_u_credit=1 max_password_retry=3 plugin_enabled_phase1[]=systemd|1.0.4| systemctl_exit_code=0 systemd_version=229 systemd_builtin_components=+PAM,+AUDIT,+SELINUX,+IMA,+APPARMOR,+SMACK,+SYSVINIT,+UTMP,+LIBCRYPTSETUP,+GCRYPT,+GNUTLS,+ACL,+XZ,-LZ4,+SECCOMP,+BLKID,+ELFUTILS,+KMOD,-IDN systemd_unit_file[]=proc-sys-fs-binfmt_misc.automount|static| systemd_unit_file[]=dev-hugepages.mount|static| systemd_unit_file[]=dev-mqueue.mount|static| systemd_unit_file[]=proc-sys-fs-binfmt_misc.mount|static| systemd_unit_file[]=sys-fs-fuse-connections.mount|static| systemd_unit_file[]=sys-kernel-config.mount|static| systemd_unit_file[]=sys-kernel-debug.mount|static| systemd_unit_file[]=acpid.path|enabled| systemd_unit_file[]=systemd-ask-password-console.path|static| systemd_unit_file[]=systemd-ask-password-plymouth.path|static| systemd_unit_file[]=systemd-ask-password-wall.path|static| systemd_unit_file[]=systemd-networkd-resolvconf-update.path|static| systemd_unit_file[]=acpid.service|disabled| systemd_unit_file[]=apt-daily-upgrade.service|static| systemd_unit_file[]=apt-daily.service|static| systemd_unit_file[]=autovt@.service|enabled| systemd_unit_file[]=bootlogd.service|masked| systemd_unit_file[]=bootlogs.service|masked| systemd_unit_file[]=bootmisc.service|masked| systemd_unit_file[]=checkfs.service|masked| systemd_unit_file[]=checkroot-bootclean.service|masked| systemd_unit_file[]=checkroot.service|masked| systemd_unit_file[]=cloud-config.service|enabled| systemd_unit_file[]=cloud-final.service|enabled| systemd_unit_file[]=cloud-init-local.service|enabled| systemd_unit_file[]=cloud-init.service|enabled| systemd_unit_file[]=console-getty.service|disabled| systemd_unit_file[]=console-setup.service|static| systemd_unit_file[]=console-shell.service|disabled| systemd_unit_file[]=container-getty@.service|static| systemd_unit_file[]=cron.service|enabled| systemd_unit_file[]=cryptdisks-early.service|masked| systemd_unit_file[]=cryptdisks.service|masked| systemd_unit_file[]=dbus-org.freedesktop.hostname1.service|static| systemd_unit_file[]=dbus-org.freedesktop.locale1.service|static| systemd_unit_file[]=dbus-org.freedesktop.login1.service|static| systemd_unit_file[]=dbus-org.freedesktop.network1.service|disabled| systemd_unit_file[]=dbus-org.freedesktop.resolve1.service|disabled| systemd_unit_file[]=dbus-org.freedesktop.timedate1.service|static| systemd_unit_file[]=dbus.service|static| systemd_unit_file[]=debug-shell.service|disabled| systemd_unit_file[]=dm-event.service|disabled| systemd_unit_file[]=emergency.service|static| systemd_unit_file[]=fail2ban.service|enabled| systemd_unit_file[]=fuse.service|masked| systemd_unit_file[]=getty-static.service|static| systemd_unit_file[]=getty@.service|enabled| systemd_unit_file[]=halt.service|masked| systemd_unit_file[]=hc-net-ifup@.service|static| systemd_unit_file[]=hc-net-scan.service|enabled| systemd_unit_file[]=hostname.service|masked| systemd_unit_file[]=hwclock.service|masked| systemd_unit_file[]=ifup@.service|static| systemd_unit_file[]=initrd-cleanup.service|static| systemd_unit_file[]=initrd-parse-etc.service|static| systemd_unit_file[]=initrd-switch-root.service|static| systemd_unit_file[]=initrd-udevadm-cleanup-db.service|static| systemd_unit_file[]=keyboard-setup.service|disabled| systemd_unit_file[]=killprocs.service|masked| systemd_unit_file[]=kmod-static-nodes.service|static| systemd_unit_file[]=kmod.service|static| systemd_unit_file[]=lvm2-lvmetad.service|disabled| systemd_unit_file[]=lvm2-lvmpolld.service|disabled| systemd_unit_file[]=lvm2-monitor.service|enabled| systemd_unit_file[]=lvm2-pvscan@.service|static| systemd_unit_file[]=lvm2.service|masked| systemd_unit_file[]=mdadm-shutdown.service|disabled| systemd_unit_file[]=module-init-tools.service|static| systemd_unit_file[]=motd-news.service|static| systemd_unit_file[]=motd.service|masked| systemd_unit_file[]=mountall-bootclean.service|masked| systemd_unit_file[]=mountall.service|masked| systemd_unit_file[]=mountdevsubfs.service|masked| systemd_unit_file[]=mountkernfs.service|masked| systemd_unit_file[]=mountnfs-bootclean.service|masked| systemd_unit_file[]=mountnfs.service|masked| systemd_unit_file[]=networking.service|enabled| systemd_unit_file[]=plymouth-halt.service|static| systemd_unit_file[]=plymouth-kexec.service|static| systemd_unit_file[]=plymouth-log.service|static| systemd_unit_file[]=plymouth-poweroff.service|static| systemd_unit_file[]=plymouth-quit-wait.service|static| systemd_unit_file[]=plymouth-quit.service|static| systemd_unit_file[]=plymouth-read-write.service|static| systemd_unit_file[]=plymouth-reboot.service|static| systemd_unit_file[]=plymouth-start.service|static| systemd_unit_file[]=plymouth-switch-root.service|static| systemd_unit_file[]=plymouth.service|static| systemd_unit_file[]=pollinate.service|enabled| systemd_unit_file[]=procps.service|static| systemd_unit_file[]=quotaon.service|static| systemd_unit_file[]=rc-local.service|static| systemd_unit_file[]=rc.local.service|static| systemd_unit_file[]=rc.service|masked| systemd_unit_file[]=rcS.service|masked| systemd_unit_file[]=reboot.service|masked| systemd_unit_file[]=rescue.service|static| systemd_unit_file[]=resolvconf.service|enabled| systemd_unit_file[]=rmnologin.service|masked| systemd_unit_file[]=rsync.service|disabled| systemd_unit_file[]=rsyslog.service|enabled| systemd_unit_file[]=sendsigs.service|masked| systemd_unit_file[]=serial-getty@.service|disabled| systemd_unit_file[]=setvtrgb.service|static| systemd_unit_file[]=sigpwr-container-shutdown.service|static| systemd_unit_file[]=single.service|masked| systemd_unit_file[]=ssh.service|enabled| systemd_unit_file[]=ssh@.service|static| systemd_unit_file[]=sshd.service|enabled| systemd_unit_file[]=stop-bootlogd-single.service|masked| systemd_unit_file[]=stop-bootlogd.service|masked| systemd_unit_file[]=syslog.service|enabled| systemd_unit_file[]=systemd-ask-password-console.service|static| systemd_unit_file[]=systemd-ask-password-plymouth.service|static| systemd_unit_file[]=systemd-ask-password-wall.service|static| systemd_unit_file[]=systemd-backlight@.service|static| systemd_unit_file[]=systemd-binfmt.service|static| systemd_unit_file[]=systemd-bootchart.service|disabled| systemd_unit_file[]=systemd-bus-proxyd.service|static| systemd_unit_file[]=systemd-exit.service|static| systemd_unit_file[]=systemd-fsck-root.service|static| systemd_unit_file[]=systemd-fsck@.service|static| systemd_unit_file[]=systemd-fsckd.service|static| systemd_unit_file[]=systemd-halt.service|static| systemd_unit_file[]=systemd-hibernate-resume@.service|static| systemd_unit_file[]=systemd-hibernate.service|static| systemd_unit_file[]=systemd-hostnamed.service|static| systemd_unit_file[]=systemd-hwdb-update.service|static| systemd_unit_file[]=systemd-hybrid-sleep.service|static| systemd_unit_file[]=systemd-initctl.service|static| systemd_unit_file[]=systemd-journal-flush.service|static| systemd_unit_file[]=systemd-journald.service|static| systemd_unit_file[]=systemd-kexec.service|static| systemd_unit_file[]=systemd-localed.service|static| systemd_unit_file[]=systemd-logind.service|static| systemd_unit_file[]=systemd-machine-id-commit.service|static| systemd_unit_file[]=systemd-modules-load.service|static| systemd_unit_file[]=systemd-networkd-resolvconf-update.service|static| systemd_unit_file[]=systemd-networkd-wait-online.service|disabled| systemd_unit_file[]=systemd-networkd.service|disabled| systemd_unit_file[]=systemd-poweroff.service|static| systemd_unit_file[]=systemd-quotacheck.service|static| systemd_unit_file[]=systemd-random-seed.service|static| systemd_unit_file[]=systemd-reboot.service|static| systemd_unit_file[]=systemd-remount-fs.service|static| systemd_unit_file[]=systemd-resolved.service|disabled| systemd_unit_file[]=systemd-rfkill.service|static| systemd_unit_file[]=systemd-suspend.service|static| systemd_unit_file[]=systemd-sysctl.service|static| systemd_unit_file[]=systemd-timedated.service|static| systemd_unit_file[]=systemd-timesyncd.service|enabled| systemd_unit_file[]=systemd-tmpfiles-clean.service|static| systemd_unit_file[]=systemd-tmpfiles-setup-dev.service|static| systemd_unit_file[]=systemd-tmpfiles-setup.service|static| systemd_unit_file[]=systemd-udev-settle.service|static| systemd_unit_file[]=systemd-udev-trigger.service|static| systemd_unit_file[]=systemd-udevd.service|static| systemd_unit_file[]=systemd-update-utmp-runlevel.service|static| systemd_unit_file[]=systemd-update-utmp.service|static| systemd_unit_file[]=systemd-user-sessions.service|static| systemd_unit_file[]=udev.service|static| systemd_unit_file[]=umountfs.service|masked| systemd_unit_file[]=umountnfs.service|masked| systemd_unit_file[]=umountroot.service|masked| systemd_unit_file[]=unattended-upgrades.service|enabled| systemd_unit_file[]=urandom.service|static| systemd_unit_file[]=ureadahead-stop.service|static| systemd_unit_file[]=ureadahead.service|enabled| systemd_unit_file[]=user@.service|static| systemd_unit_file[]=x11-common.service|masked| systemd_unit_file[]=-.slice|static| systemd_unit_file[]=machine.slice|static| systemd_unit_file[]=system.slice|static| systemd_unit_file[]=user.slice|static| systemd_unit_file[]=acpid.socket|enabled| systemd_unit_file[]=dbus.socket|static| systemd_unit_file[]=dm-event.socket|enabled| systemd_unit_file[]=lvm2-lvmetad.socket|enabled| systemd_unit_file[]=lvm2-lvmpolld.socket|enabled| systemd_unit_file[]=ssh.socket|disabled| systemd_unit_file[]=syslog.socket|static| systemd_unit_file[]=systemd-bus-proxyd.socket|static| systemd_unit_file[]=systemd-fsckd.socket|static| systemd_unit_file[]=systemd-initctl.socket|static| systemd_unit_file[]=systemd-journald-audit.socket|static| systemd_unit_file[]=systemd-journald-dev-log.socket|static| systemd_unit_file[]=systemd-journald.socket|static| systemd_unit_file[]=systemd-networkd.socket|disabled| systemd_unit_file[]=systemd-rfkill.socket|static| systemd_unit_file[]=systemd-udevd-control.socket|static| systemd_unit_file[]=systemd-udevd-kernel.socket|static| systemd_unit_file[]=basic.target|static| systemd_unit_file[]=bluetooth.target|static| systemd_unit_file[]=busnames.target|static| systemd_unit_file[]=cloud-config.target|static| systemd_unit_file[]=cloud-init.target|static| systemd_unit_file[]=cryptsetup-pre.target|static| systemd_unit_file[]=cryptsetup.target|static| systemd_unit_file[]=ctrl-alt-del.target|disabled| systemd_unit_file[]=default.target|static| systemd_unit_file[]=emergency.target|static| systemd_unit_file[]=exit.target|disabled| systemd_unit_file[]=final.target|static| systemd_unit_file[]=getty.target|static| systemd_unit_file[]=graphical.target|static| systemd_unit_file[]=halt.target|disabled| systemd_unit_file[]=hibernate.target|static| systemd_unit_file[]=hybrid-sleep.target|static| systemd_unit_file[]=initrd-fs.target|static| systemd_unit_file[]=initrd-root-fs.target|static| systemd_unit_file[]=initrd-switch-root.target|static| systemd_unit_file[]=initrd.target|static| systemd_unit_file[]=kexec.target|disabled| systemd_unit_file[]=local-fs-pre.target|static| systemd_unit_file[]=local-fs.target|static| systemd_unit_file[]=mail-transport-agent.target|static| systemd_unit_file[]=multi-user.target|static| systemd_unit_file[]=network-online.target|static| systemd_unit_file[]=network-pre.target|static| systemd_unit_file[]=network.target|static| systemd_unit_file[]=nss-lookup.target|static| systemd_unit_file[]=nss-user-lookup.target|static| systemd_unit_file[]=paths.target|static| systemd_unit_file[]=poweroff.target|disabled| systemd_unit_file[]=printer.target|static| systemd_unit_file[]=reboot.target|disabled| systemd_unit_file[]=remote-fs-pre.target|static| systemd_unit_file[]=remote-fs.target|enabled| systemd_unit_file[]=rescue.target|disabled| systemd_unit_file[]=rpcbind.target|static| systemd_unit_file[]=runlevel0.target|disabled| systemd_unit_file[]=runlevel1.target|disabled| systemd_unit_file[]=runlevel2.target|static| systemd_unit_file[]=runlevel3.target|static| systemd_unit_file[]=runlevel4.target|static| systemd_unit_file[]=runlevel5.target|static| systemd_unit_file[]=runlevel6.target|disabled| systemd_unit_file[]=shutdown.target|static| systemd_unit_file[]=sigpwr.target|static| systemd_unit_file[]=sleep.target|static| systemd_unit_file[]=slices.target|static| systemd_unit_file[]=smartcard.target|static| systemd_unit_file[]=sockets.target|static| systemd_unit_file[]=sound.target|static| systemd_unit_file[]=suspend.target|static| systemd_unit_file[]=swap.target|static| systemd_unit_file[]=sysinit.target|static| systemd_unit_file[]=system-update.target|static| systemd_unit_file[]=time-sync.target|static| systemd_unit_file[]=timers.target|static| systemd_unit_file[]=umount.target|static| systemd_unit_file[]=apt-daily-upgrade.timer|enabled| systemd_unit_file[]=apt-daily.timer|enabled| systemd_unit_file[]=motd-news.timer|enabled| systemd_unit_file[]=systemd-tmpfiles-clean.timer|static| systemd_unit_file[]=ureadahead-stop.timer|static| journal_bootlogs=1 journal_oldest_bootdate=2021-01-07 journal_contains_errors=0 journal_disk_size=4.8M journal_meta_data=FilePath:/run/log/journal/69729f16b49d4ddd97099d6ef60261e2/system.journal,FileID:3d91fd1665b343a3a14e088eb44bb6c7,MachineID:69729f16b49d4ddd97099d6ef60261e2,BootID:80cc91d5c219426eadaa3b4617e96328,SequentialNumberID:38dc3cd3d69f481fb5f769834a761273,State:ONLINE,CompatibleFlags:,IncompatibleFlags:COMPRESSED-XZ,Headersize:240,Arenasize:2559760,DataHashTableSize:4444,FieldHashTableSize:333,RotateSuggested:no,HeadSequentialNumber:1509,TailSequentialNumber:1664,HeadRealtimeTimestamp:Thu2021-01-0717:56:39CET,TailRealtimeTimestamp:Thu2021-01-0717:58:09CET,TailMonotonicTimestamp:16min32.192s,Objects:871,EntryObjects:156,DataObjects:394,DataHashTableFill:8.9%,FieldObjects:33,FieldHashTableFill:9.9%,TagObjects:0,EntryArrayObjects:286,Diskusage:2.4M,|,FilePath:/run/log/journal/69729f16b49d4ddd97099d6ef60261e2/system@38dc3cd3d69f481fb5f769834a761273-0000000000000001-0005b8521d57f454.journal,FileID:38dc3cd3d69f481fb5f769834a761273,MachineID:69729f16b49d4ddd97099d6ef60261e2,BootID:80cc91d5c219426eadaa3b4617e96328,SequentialNumberID:38dc3cd3d69f481fb5f769834a761273,State:ARCHIVED,CompatibleFlags:,IncompatibleFlags:COMPRESSED-XZ,Headersize:240,Arenasize:2559760,DataHashTableSize:4444,FieldHashTableSize:333,RotateSuggested:yes,HeadSequentialNumber:1,TailSequentialNumber:1508,HeadRealtimeTimestamp:Thu2021-01-0717:41:42CET,TailRealtimeTimestamp:Thu2021-01-0717:56:39CET,TailMonotonicTimestamp:15min1.902s,Objects:5937,EntryObjects:1508,DataObjects:3335,DataHashTableFill:75.0%,FieldObjects:59,FieldHashTableFill:17.7%,TagObjects:0,EntryArrayObjects:1033,Diskusage:2.4M, systemd_status=running systemd_unit_not_found[]=org.freedesktop.network1.busname systemd_unit_not_found[]=org.freedesktop.resolve1.busname systemd_unit_not_found[]=apparmor.service systemd_unit_not_found[]=auditd.service systemd_unit_not_found[]=console-screen.service systemd_unit_not_found[]=display-manager.service systemd_unit_not_found[]=firewalld.service systemd_unit_not_found[]=hv_kvp_daemon.service systemd_unit_not_found[]=iptables.service systemd_unit_not_found[]=kbd.service systemd_unit_not_found[]=lvm2-activation.service systemd_unit_not_found[]=NetworkManager.service systemd_unit_not_found[]=snapd.seeded.service systemd_unit_not_found[]=sshd-keygen.service systemd_unit_not_found[]=systemd-sysusers.service systemd_unit_not_found[]=systemd-update-done.service systemd_unit_not_found[]=systemd-vconsole-setup.service systemd_service_not_found[]=apparmor.service systemd_service_not_found[]=auditd.service systemd_service_not_found[]=console-screen.service systemd_service_not_found[]=display-manager.service systemd_service_not_found[]=firewalld.service systemd_service_not_found[]=hv_kvp_daemon.service systemd_service_not_found[]=iptables.service systemd_service_not_found[]=kbd.service systemd_service_not_found[]=lvm2-activation.service systemd_service_not_found[]=NetworkManager.service systemd_service_not_found[]=snapd.seeded.service systemd_service_not_found[]=sshd-keygen.service systemd_service_not_found[]=systemd-sysusers.service systemd_service_not_found[]=systemd-update-done.service systemd_service_not_found[]=systemd-vconsole-setup.service journal_coredumps_lastday=0 plugins_enabled=1 hostid=8e8b64be741317e8a1cda2e5e72aaef4b5fb99c3 hostid2=7a956de9e4b7944f47e9f464aa31ebf80dc41ce00ac69b215945a6f53eb816e8 suggestion[]=BOOT-5122|Set a password on GRUB boot loader to prevent altering boot configuration (e.g. boot in single user mode without password)|-|-| running_service_tool=systemctl running_service[]=acpid running_service[]=cron running_service[]=dbus running_service[]=fail2ban running_service[]=getty@tty1 running_service[]=lvm2-lvmetad running_service[]=mdadm running_service[]=portsentry running_service[]=qemu-guest-agent running_service[]=rsyslog running_service[]=sendmail running_service[]=serial-getty@ttyS0 running_service[]=ssh running_service[]=systemd-journald running_service[]=systemd-logind running_service[]=systemd-resolved running_service[]=systemd-timesyncd running_service[]=systemd-udevd running_service[]=unattended-upgrades running_service[]=user@0 boot_service_tool=systemctl boot_service[]=autovt@ boot_service[]=cloud-config boot_service[]=cloud-final boot_service[]=cloud-init-local boot_service[]=cloud-init boot_service[]=cron boot_service[]=fail2ban boot_service[]=getty@ boot_service[]=hc-net-scan boot_service[]=lvm2-monitor boot_service[]=networking boot_service[]=pollinate boot_service[]=resolvconf boot_service[]=rsyslog boot_service[]=ssh boot_service[]=sshd boot_service[]=syslog boot_service[]=systemd-timesyncd boot_service[]=unattended-upgrades boot_service[]=ureadahead uptime_in_seconds=995 uptime_in_days=0 boot_loader=GRUB2 boot_uefi_booted=0 boot_uefi_booted_secure=0 service_manager=systemd linux_default_runlevel=5 cpu_pae=1 cpu_nx=1 linux_kernel_release=4.4.0-197-generic linux_kernel_version=#229-Ubuntu SMP Wed Nov 25 11:05:42 UTC 2020 linux_kernel_type=modular loaded_kernel_module[]=ablk_helper loaded_kernel_module[]=aes_x86_64 loaded_kernel_module[]=aesni_intel loaded_kernel_module[]=ahci loaded_kernel_module[]=async_memcpy loaded_kernel_module[]=async_pq loaded_kernel_module[]=async_raid6_recov loaded_kernel_module[]=async_tx loaded_kernel_module[]=async_xor loaded_kernel_module[]=autofs4 loaded_kernel_module[]=binfmt_misc loaded_kernel_module[]=btrfs loaded_kernel_module[]=crc32_pclmul loaded_kernel_module[]=crct10dif_pclmul loaded_kernel_module[]=cryptd loaded_kernel_module[]=gf128mul loaded_kernel_module[]=ghash_clmulni_intel loaded_kernel_module[]=glue_helper loaded_kernel_module[]=hid loaded_kernel_module[]=hid_generic loaded_kernel_module[]=inet_diag loaded_kernel_module[]=input_leds loaded_kernel_module[]=ip_tables loaded_kernel_module[]=ipt_REJECT loaded_kernel_module[]=iptable_filter loaded_kernel_module[]=iptable_nat loaded_kernel_module[]=joydev loaded_kernel_module[]=libahci loaded_kernel_module[]=libcrc32c loaded_kernel_module[]=linear loaded_kernel_module[]=lrw loaded_kernel_module[]=multipath loaded_kernel_module[]=nf_conntrack loaded_kernel_module[]=nf_conntrack_ipv4 loaded_kernel_module[]=nf_defrag_ipv4 loaded_kernel_module[]=nf_nat loaded_kernel_module[]=nf_nat_ipv4 loaded_kernel_module[]=nf_reject_ipv4 loaded_kernel_module[]=psmouse loaded_kernel_module[]=raid0 loaded_kernel_module[]=raid1 loaded_kernel_module[]=raid10 loaded_kernel_module[]=raid456 loaded_kernel_module[]=raid6_pq loaded_kernel_module[]=serio_raw loaded_kernel_module[]=tcp_diag loaded_kernel_module[]=udp_diag loaded_kernel_module[]=usbhid loaded_kernel_module[]=virtio_rng loaded_kernel_module[]=virtio_scsi loaded_kernel_module[]=x_tables loaded_kernel_module[]=xor loaded_kernel_module[]=xt_multiport linux_config_file=/boot/config-4.4.0-197-generic linux_kernel_io_scheduler[]=deadline warning[]=KRNL-5830|Reboot of system is most likely needed||text:reboot| memory_size=1998680 memory_units=kB auth_group_ids_unique=1 auth_group_names_unique=1 suggestion[]=AUTH-9230|Configure password hashing rounds in /etc/login.defs|-|-| real_user[]=root,0 pam_cracklib=1 pam_module[]=/lib/x86_64-linux-gnu/security/pam_access.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_cracklib.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_debug.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_deny.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_echo.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_env.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_exec.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_extrausers.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_faildelay.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_filter.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_ftp.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_group.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_issue.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_keyinit.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_lastlog.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_limits.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_listfile.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_localuser.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_loginuid.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_mail.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_mkhomedir.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_motd.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_namespace.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_nologin.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_permit.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_pwhistory.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_rhosts.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_rootok.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_securetty.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_selinux.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_sepermit.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_shells.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_stress.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_succeed_if.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_systemd.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_tally2.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_time.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_timestamp.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_tty_audit.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_umask.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_unix.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_userdb.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_warn.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_wheel.so pam_module[]=/lib/x86_64-linux-gnu/security/pam_xauth.so manual_event[]=AUTH-9328:03 auth_failed_logins_tooling[]=/etc/login.defs auth_failed_logins_logged=1 ldap_auth_enabled=0 ldap_pam_enabled=0 password_min_days=7 password_max_days=90 available_shell[]=/bin/sh available_shell[]=/bin/dash available_shell[]=/bin/bash available_shell[]=/bin/rbash session_timeout_enabled=0 suggestion[]=FILE-6310|To decrease the impact of a full /home file system, place /home on a separate partition|-|-| suggestion[]=FILE-6310|To decrease the impact of a full /var file system, place /var on a separate partition|-|-| file_systems_ext[]=/|ext4| suggestion[]=FILE-6430|Consider disabling unused kernel modules|/etc/modprobe.d/blacklist.conf|Add 'install MODULENAME /bin/true' (without quotes)| usb_authorized_default_device[]=/sys/bus/usb/devices/usb1 usb_authorized_device[]=/sys/bus/usb/devices/usb1 usb_authorized_default_device[]=/sys/bus/usb/devices/usb2 usb_authorized_device[]=/sys/bus/usb/devices/usb2 suggestion[]=NAME-4028|Check DNS configuration for the dns domain name|-|-| localhost-mapped-to=::1 name_cache_used=0 package_manager[]=dpkg installed_packages=377 suggestion[]=PKGS-7370|Install debsums utility for the verification of packages with known good database.|-|-| suggestion[]=PKGS-7394|Install package apt-show-versions for patch management purposes|-|-| installed_kernel_packages=2 unattended_upgrade_tool[]=unattended-upgrade unattended_upgrade_option_available=1 ipv6_mode=auto ipv6_only=0 nameserver[]=213.133.99.99 nameserver[]=213.133.98.98 nameserver[]=213.133.100.100 default_gateway[]=172.31.1.1 network_interface[]=lo network_interface[]=eth0 network_mac_address[]=96:00:00:8b:fc:bd network_ipv4_address[]=116.203.241.83 network_ipv4_address[]=127.0.0.1 network_listen[]=raw,ss,v1|udp|*:513|portsentry| network_listen[]=raw,ss,v1|udp|*:37444|portsentry| network_listen[]=raw,ss,v1|udp|*:31335|portsentry| network_listen[]=raw,ss,v1|udp|*:31337|portsentry| network_listen[]=raw,ss,v1|udp|*:635|portsentry| network_listen[]=raw,ss,v1|udp|*:640|portsentry| network_listen[]=raw,ss,v1|udp|*:641|portsentry| network_listen[]=raw,ss,v1|udp|*:700|portsentry| network_listen[]=raw,ss,v1|udp|*:34555|portsentry| network_listen[]=raw,ss,v1|udp|*:1|portsentry| network_listen[]=raw,ss,v1|udp|*:32770|portsentry| network_listen[]=raw,ss,v1|udp|*:32771|portsentry| network_listen[]=raw,ss,v1|udp|*:32772|portsentry| network_listen[]=raw,ss,v1|udp|*:32773|portsentry| network_listen[]=raw,ss,v1|udp|*:32774|portsentry| network_listen[]=raw,ss,v1|udp|*:7|portsentry| network_listen[]=raw,ss,v1|udp|*:9|portsentry| network_listen[]=raw,ss,v1|udp|*:54321|portsentry| network_listen[]=raw,ss,v1|udp|*:68|dhclient| network_listen[]=raw,ss,v1|udp|*:69|portsentry| network_listen[]=raw,ss,v1|udp|*:161|portsentry| network_listen[]=raw,ss,v1|udp|*:162|portsentry| network_listen[]=raw,ss,v1|udp|*:5355|systemd-resolve| network_listen[]=raw,ss,v1|udp|:::5355|systemd-resolve| network_listen[]=raw,ss,v1|tcp|127.0.0.1:587|sendmail-mta| network_listen[]=raw,ss,v1|tcp|*:5355|systemd-resolve| network_listen[]=raw,ss,v1|tcp|*:22|sshd| network_listen[]=raw,ss,v1|tcp|127.0.0.1:25|sendmail-mta| network_listen[]=raw,ss,v1|tcp|:::5355|systemd-resolve| network_listen[]=raw,ss,v1|tcp|:::22|sshd| suggestion[]=NETW-3200|Determine if protocol 'dccp' is really needed on this system|-|-| uncommon_network_protocol_enabled=dccp suggestion[]=NETW-3200|Determine if protocol 'sctp' is really needed on this system|-|-| uncommon_network_protocol_enabled=sctp suggestion[]=NETW-3200|Determine if protocol 'rds' is really needed on this system|-|-| uncommon_network_protocol_enabled=rds suggestion[]=NETW-3200|Determine if protocol 'tipc' is really needed on this system|-|-| uncommon_network_protocol_enabled=tipc smtp_daemon[]=sendmail imap_daemon= pop3_daemon= smtp_daemon=sendmail firewall_software[]=iptables warning[]=FIRE-4512|iptables module(s) loaded, but no rules active|-|-| suggestion[]=FIRE-4513|Check iptables rules to see which rules are currently not used|-|-| firewall_no_logging[]=iptables manual[]=Verify if there is a formal process for testing and applying firewall rules manual[]=Verify all traffic is filtered the right way between the different security zones manual[]=Verify if a list is available with all required services manual[]=Make sure an explicit deny all is the default policy for all unmatched traffic suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowTcpForwarding (set YES to NO)|-| details[]=SSH-7408|sshd|desc:sshd option AllowTcpForwarding;field:AllowTcpForwarding;prefval:NO;value:YES;| suggestion[]=SSH-7408|Consider hardening SSH configuration|ClientAliveCountMax (set 3 to 2)|-| details[]=SSH-7408|sshd|desc:sshd option ClientAliveCountMax;field:ClientAliveCountMax;prefval:2;value:3;| suggestion[]=SSH-7408|Consider hardening SSH configuration|Compression (set YES to NO)|-| details[]=SSH-7408|sshd|desc:sshd option Compression;field:Compression;prefval:NO;value:YES;| suggestion[]=SSH-7408|Consider hardening SSH configuration|LogLevel (set INFO to VERBOSE)|-| details[]=SSH-7408|sshd|desc:sshd option LogLevel;field:LogLevel;prefval:VERBOSE;value:INFO;| suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxAuthTries (set 6 to 3)|-| details[]=SSH-7408|sshd|desc:sshd option MaxAuthTries;field:MaxAuthTries;prefval:3;value:6;| suggestion[]=SSH-7408|Consider hardening SSH configuration|MaxSessions (set 10 to 2)|-| details[]=SSH-7408|sshd|desc:sshd option MaxSessions;field:MaxSessions;prefval:2;value:10;| suggestion[]=SSH-7408|Consider hardening SSH configuration|PermitRootLogin (set YES to (FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD))|-| details[]=SSH-7408|sshd|desc:sshd option PermitRootLogin;field:PermitRootLogin;prefval:(FORCED-COMMANDS-ONLY|NO|PROHIBIT-PASSWORD|WITHOUT-PASSWORD);value:YES;| suggestion[]=SSH-7408|Consider hardening SSH configuration|Port (set 22 to )|-| details[]=SSH-7408|sshd|desc:sshd option Port;field:Port;prefval:;value:22;| suggestion[]=SSH-7408|Consider hardening SSH configuration|TCPKeepAlive (set YES to NO)|-| details[]=SSH-7408|sshd|desc:sshd option TCPKeepAlive;field:TCPKeepAlive;prefval:NO;value:YES;| suggestion[]=SSH-7408|Consider hardening SSH configuration|X11Forwarding (set YES to NO)|-| details[]=SSH-7408|sshd|desc:sshd option X11Forwarding;field:X11Forwarding;prefval:NO;value:YES;| suggestion[]=SSH-7408|Consider hardening SSH configuration|AllowAgentForwarding (set YES to NO)|-| details[]=SSH-7408|sshd|desc:sshd option AllowAgentForwarding;field:AllowAgentForwarding;prefval:NO;value:YES;| suggestion[]=SSH-7408|Consider hardening SSH configuration|UsePrivilegeSeparation (set YES to SANDBOX)|-| details[]=SSH-7408|sshd|desc:sshd option UsePrivilegeSeparation;field:UsePrivilegeSeparation;prefval:SANDBOX;value:YES;| ssh_daemon_running=1 openssh_daemon_running=1 syslog_daemon_present=1 syslog_daemon[]=systemd-journal syslog_daemon_present=1 syslog_daemon[]=rsyslog log_directory[]=/var/log log_directory[]=/var/log/apt log_directory[]=/var/log/unattended-upgrades remote_syslog_configured=0 suggestion[]=LOGG-2154|Enable logging to an external logging host for archiving purposes and additional protection|-|-| log_directory[]=/var/log log_rotation_config_found=1 log_rotation_tool=logrotate suggestion[]=BANN-7126|Add a legal banner to /etc/issue, to warn unauthorized users|-|-| weak_banner_file[]=/etc/issue suggestion[]=BANN-7130|Add legal banner to /etc/issue.net, to warn unauthorized users|-|-| crond_running=1 scheduler[]=crond cronjob[]=17,*,*,*,*,root,cd,/,&&,run-parts,--report,/etc/cron.hourly cronjob[]=25,6,*,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.daily,) cronjob[]=47,6,*,*,7,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.weekly,) cronjob[]=52,6,1,*,*,root,test,-x,/usr/sbin/anacron,||,(,cd,/,&&,run-parts,--report,/etc/cron.monthly,) cronjob[]=/etc/cron.d/tiger cronjob[]=/etc/cron.d/sendmail cronjob[]=/etc/cron.d/mdadm cronjob[]=/etc/cron.daily/bsdmainutils cronjob[]=/etc/cron.daily/apt-compat cronjob[]=/etc/cron.daily/sendmail cronjob[]=/etc/cron.daily/passwd cronjob[]=/etc/cron.daily/acct cronjob[]=/etc/cron.daily/man-db cronjob[]=/etc/cron.daily/aptitude cronjob[]=/etc/cron.daily/dpkg cronjob[]=/etc/cron.daily/mdadm cronjob[]=/etc/cron.daily/cracklib-runtime cronjob[]=/etc/cron.daily/logrotate cronjob[]=/etc/cron.weekly/man-db cronjob[]=/etc/cron.weekly/fstrim cronjob[]=/etc/cron.monthly/acct suggestion[]=ACCT-9626|Enable sysstat to collect accounting (no results)|-|-| suggestion[]=ACCT-9628|Enable auditd to collect audit information|-|-| linux_auditd_running=0 audit_daemon_running=0 tz_variable_empty=1 warning[]=TIME-3185|systemd-timesyncd never successfully synchronized time|-|-| ntp_config_found=0 ntp_config_type_daemon=1 ntp_config_type_eventbased=0 ntp_config_type_scheduled=0 ntp_config_type_startup=0 ntp_daemon=systemd-timesyncd ntp_daemon_running=1 certificate[]=/etc/ssl/certs/ca-certificates.crt|0|cn:ACCVRAIZ1;notafter:Dec 31 09:37:37 2030 GMT;| certificates=139 kernel_entropy=994 rng_found=0 framework_grsecurity=0 framework_selinux=0 suggestion[]=FINT-4350|Install a file integrity tool to monitor changes to critical and sensitive files|-|-| suggestion[]=TOOL-5002|Determine if automation tools are present for system management|-|-| ids_ips_tooling[]=fail2ban fail2ban_config=/etc/fail2ban/jail.local fail2ban_enabled_service[]=sshd automation_tool_present=0 malware_scanner[]=rkhunter malware_scanner_installed=1 suggestion[]=FILE-7524|Consider restricting file permissions|See screen output or log file|text:Use chmod to change file permissions| home_directory[]=/bin home_directory[]=/dev home_directory[]=/root home_directory[]=/run/systemd home_directory[]=/run/systemd/netif home_directory[]=/run/systemd/resolve home_directory[]=/usr/games home_directory[]=/usr/sbin home_directory[]=/var/backups home_directory[]=/var/cache/man home_directory[]=/var/cache/pollinate home_directory[]=/var/lib/sendmail home_directory[]=/var/mail home_directory[]=/var/run/dbus home_directory[]=/var/run/sshd details[]=KRNL-6000|sysctl|desc:Disable loading of TTY line disciplines;field:dev.tty.ldisc_autoload;prefval:0;value:1;| details[]=KRNL-6000|sysctl|desc:Restrict FIFO special device creation behavior;field:fs.protected_fifos;prefval:2;value:0;| details[]=KRNL-6000|sysctl|desc:Restrict regular files creation behavior;field:fs.protected_regular;prefval:2;value:0;| details[]=KRNL-6000|sysctl|desc:Restrict module loading once this sysctl value is loaded;field:kernel.modules_disabled;prefval:1;value:0;| details[]=KRNL-6000|sysctl|desc:Restrict unprivileged access to the perf_event_open() system call.;field:kernel.perf_event_paranoid;prefval:3;value:1;| details[]=KRNL-6000|sysctl|desc:Restrict BPF for unprivileged users;field:kernel.unprivileged_bpf_disabled;prefval:1;value:0;| details[]=KRNL-6000|sysctl|desc:Hardened BPF JIT compilation;field:net.core.bpf_jit_harden;prefval:2;value:0;| suggestion[]=KRNL-6000|One or more sysctl values differ from the scan profile and could be tweaked||Change sysctl value or disable test (skip-test=KRNL-6000:)| compiler_installed=1 lynis_tests_done=257 report_datetime_end=2021-01-07 17:58:36 dhcp_client_running=1 arpwatch_running=0 firewall_active=1 firewall_empty_ruleset=1 firewall_installed=1 installed_packages_array=|acct,6.5.5-2.1ubuntu1|acl,2.2.52-3|acpid,1:2.0.26-1ubuntu2|adduser,3.113+nmu3ubuntu4|apt,1.2.32ubuntu0.2|apt-transport-https,1.2.32ubuntu0.2|apt-utils,1.2.32ubuntu0.2|aptitude,0.7.4-2ubuntu2|aptitude-common,0.7.4-2ubuntu2|base-files,9.4ubuntu4.13|base-passwd,3.5.39|bash,4.3-14ubuntu1.4|bind9-host,1:9.10.3.dfsg.P4-8ubuntu1.17|binutils,2.26.1-1ubuntu1~16.04.8|bsdmainutils,9.0.6ubuntu3|bsdutils,1:2.27.1-6ubuntu3.10|btrfs-tools,4.4-1ubuntu1.1|busybox-initramfs,1:1.22.0-15ubuntu1.4|bzip2,1.0.6-8ubuntu0.2|ca-certificates,20201027ubuntu0.16.04.1|cloud-guest-utils,0.27-0ubuntu25.2|cloud-init,20.4-0ubuntu1~16.04.1|console-setup,1.108ubuntu15.5|console-setup-linux,1.108ubuntu15.5|coreutils,8.25-2ubuntu3~16.04|cpio,2.11+dfsg-5ubuntu1.1|cracklib-runtime,2.9.2-1ubuntu1|cron,3.0pl1-128ubuntu2|cryptsetup,2:1.6.6-5ubuntu2.1|cryptsetup-bin,2:1.6.6-5ubuntu2.1|curl,7.47.0-1ubuntu2.18|dash,0.5.8-2.1ubuntu2|dbus,1.10.6-1ubuntu3.6|debconf,1.5.58ubuntu2|debconf-i18n,1.5.58ubuntu2|debianutils,4.7|dh-python,2.20151103ubuntu1.2|diffutils,1:3.3-3|dirmngr,2.1.11-6ubuntu2.1|distro-info-data,0.28ubuntu0.16|dmeventd,2:1.02.110-1ubuntu10|dmsetup,2:1.02.110-1ubuntu10|dpkg,1.18.4ubuntu1.6|e2fslibs:amd64,1.42.13-1ubuntu1.2|e2fsprogs,1.42.13-1ubuntu1.2|eatmydata,105-3|efibootmgr,0.12-4|ethtool,1:4.5-1|fail2ban,0.9.3-1|file,1:5.25-2ubuntu1.4|findutils,4.6.0+git+20160126-2|gcc-5-base:amd64,5.4.0-6ubuntu1~16.04.12|gcc-6-base:amd64,6.0.1-0ubuntu1|gdisk,1.0.1-1build1|gettext-base,0.19.7-2ubuntu3.1|gir1.2-glib-2.0:amd64,1.46.0-3ubuntu1|git,1:2.7.4-0ubuntu1.9|git-man,1:2.7.4-0ubuntu1.9|gnupg,1.4.20-1ubuntu3.3|gnupg-agent,2.1.11-6ubuntu2.1|gnupg2,2.1.11-6ubuntu2.1|gpgv,1.4.20-1ubuntu3.3|grep,2.25-1~16.04.1|groff-base,1.22.3-7|grub-common,2.02~beta2-36ubuntu3.29|grub-efi-amd64,2.02~beta2-36ubuntu3.29|grub-efi-amd64-bin,2.02~beta2-36ubuntu3.29|grub-pc-bin,2.02~beta2-36ubuntu3.29|grub2-common,2.02~beta2-36ubuntu3.29|gzip,1.6-4ubuntu1|hc-utils,0.0.3-1|host,1:9.10.3.dfsg.P4-8ubuntu1.17|hostname,3.16ubuntu2|htop,2.0.1-1ubuntu1|ifupdown,0.8.10ubuntu1.4|init,1.29ubuntu4|init-system-helpers,1.29ubuntu4|initramfs-tools,0.122ubuntu8.17|initramfs-tools-bin,0.122ubuntu8.17|initramfs-tools-core,0.122ubuntu8.17|initscripts,2.88dsf-59.3ubuntu2|insserv,1.14.0-5ubuntu3|iproute2,4.3.0-1ubuntu3.16.04.5|iptables,1.6.0-2ubuntu3|iputils-ping,3:20121221-5ubuntu2|isc-dhcp-client,4.3.3-5ubuntu12.10|isc-dhcp-common,4.3.3-5ubuntu12.10|iso-codes,3.65-1|kbd,1.15.5-1ubuntu5|keyboard-configuration,1.108ubuntu15.5|klibc-utils,2.0.4-8ubuntu1.16.04.4|kmod,22-1ubuntu5.2|less,481-2.1ubuntu0.2|libacl1:amd64,2.2.52-3|libapparmor1:amd64,2.10.95-0ubuntu2.11|libapt-inst2.0:amd64,1.2.32ubuntu0.2|libapt-pkg5.0:amd64,1.2.32ubuntu0.2|libasn1-8-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libasprintf0v5:amd64,0.19.7-2ubuntu3.1|libassuan0:amd64,2.4.2-2|libatm1:amd64,1:2.5.1-1.5|libattr1:amd64,1:2.4.47-2|libaudit-common,1:2.4.5-1ubuntu2.1|libaudit1:amd64,1:2.4.5-1ubuntu2.1|libbind9-140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libblkid1:amd64,2.27.1-6ubuntu3.10|libboost-iostreams1.58.0:amd64,1.58.0+dfsg-5ubuntu3.1|libbsd0:amd64,0.8.2-1ubuntu0.1|libbz2-1.0:amd64,1.0.6-8ubuntu0.2|libc-bin,2.23-0ubuntu11.2|libc6:amd64,2.23-0ubuntu11.2|libcap-ng0:amd64,0.7.7-1|libcap2-bin,1:2.24-12|libcap2:amd64,1:2.24-12|libcomerr2:amd64,1.42.13-1ubuntu1.2|libcrack2:amd64,2.9.2-1ubuntu1|libcryptsetup4:amd64,2:1.6.6-5ubuntu2.1|libcurl3-gnutls:amd64,7.47.0-1ubuntu2.18|libcurses-perl,1.33-1build1|libcurses-ui-perl,0.9609-1|libcwidget3v5:amd64,0.5.17-4ubuntu2|libdb5.3:amd64,5.3.28-11ubuntu0.2|libdbus-1-3:amd64,1.10.6-1ubuntu3.6|libdbus-glib-1-2:amd64,0.106-1|libdebconfclient0:amd64,0.198ubuntu1|libdevmapper-event1.02.1:amd64,2:1.02.110-1ubuntu10|libdevmapper1.02.1:amd64,2:1.02.110-1ubuntu10|libdns-export162,1:9.10.3.dfsg.P4-8ubuntu1.17|libdns162:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libdrm-common,2.4.91-2~16.04.1|libdrm2:amd64,2.4.91-2~16.04.1|libeatmydata1:amd64,105-3|libedit2:amd64,3.1-20150325-1ubuntu2|libefivar0:amd64,0.23-2|liberror-perl,0.17-1.2|libestr0,0.1.10-1|libexpat1:amd64,2.1.0-7ubuntu0.16.04.5|libfdisk1:amd64,2.27.1-6ubuntu3.10|libffi6:amd64,3.2.1-4|libfreetype6:amd64,2.6.1-0.1ubuntu2.5|libfribidi0:amd64,0.19.7-1|libfuse2:amd64,2.9.4-1ubuntu3.1|libgcc1:amd64,1:6.0.1-0ubuntu1|libgcrypt20:amd64,1.6.5-2ubuntu0.6|libgdbm3:amd64,1.8.3-13.1|libgeoip1:amd64,1.6.9-1|libgirepository-1.0-1:amd64,1.46.0-3ubuntu1|libglib2.0-0:amd64,2.48.2-0ubuntu4.6|libgmp10:amd64,2:6.1.0+dfsg-2|libgnutls-openssl27:amd64,3.4.10-4ubuntu1.8|libgnutls30:amd64,3.4.10-4ubuntu1.8|libgpg-error0:amd64,1.21-2ubuntu1|libgpm2:amd64,1.20.4-6.1|libgssapi-krb5-2:amd64,1.13.2+dfsg-5ubuntu2.2|libgssapi3-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhcrypto4-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimbase1-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libheimntlm0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libhogweed4:amd64,3.2-1ubuntu0.16.04.1|libhx509-5-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libicu55:amd64,55.1-7ubuntu0.5|libidn11:amd64,1.32-3ubuntu1.2|libisc-export160,1:9.10.3.dfsg.P4-8ubuntu1.17|libisc160:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccc140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libisccfg140:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|libjson-c2:amd64,0.11-4ubuntu2.6|libk5crypto3:amd64,1.13.2+dfsg-5ubuntu2.2|libkeyutils1:amd64,1.5.9-8ubuntu1|libklibc,2.0.4-8ubuntu1.16.04.4|libkmod2:amd64,22-1ubuntu5.2|libkrb5-26-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libkrb5-3:amd64,1.13.2+dfsg-5ubuntu2.2|libkrb5support0:amd64,1.13.2+dfsg-5ubuntu2.2|libksba8:amd64,1.3.3-1ubuntu0.16.04.1|libldap-2.4-2:amd64,2.4.42+dfsg-2ubuntu3.11|liblocale-gettext-perl,1.07-1build1|liblockfile-bin,1.09-6ubuntu1|liblockfile1:amd64,1.09-6ubuntu1|liblvm2app2.2:amd64,2.02.133-1ubuntu10|liblvm2cmd2.02:amd64,2.02.133-1ubuntu10|liblwres141:amd64,1:9.10.3.dfsg.P4-8ubuntu1.17|liblz4-1:amd64,0.0~r131-2ubuntu2|liblzma5:amd64,5.1.1alpha+20120614-2ubuntu2|liblzo2-2:amd64,2.08-1.2|libmagic1:amd64,1:5.25-2ubuntu1.4|libmnl0:amd64,1.0.3-5|libmount1:amd64,2.27.1-6ubuntu3.10|libmpdec2:amd64,2.4.2-1|libncurses5:amd64,6.0+20160213-1ubuntu1|libncursesw5:amd64,6.0+20160213-1ubuntu1|libnettle6:amd64,3.2-1ubuntu0.16.04.1|libnewt0.52:amd64,0.52.18-1ubuntu2|libnfnetlink0:amd64,1.0.1-3|libnih1:amd64,1.0.3-4.3ubuntu1|libnpth0:amd64,1.2-3|libp11-kit0:amd64,0.23.2-5~ubuntu16.04.2|libpam-cracklib:amd64,1.1.8-3.2ubuntu2.3|libpam-modules-bin,1.1.8-3.2ubuntu2.3|libpam-modules:amd64,1.1.8-3.2ubuntu2.3|libpam-runtime,1.1.8-3.2ubuntu2.3|libpam-systemd:amd64,229-4ubuntu21.29|libpam0g:amd64,1.1.8-3.2ubuntu2.3|libpci3:amd64,1:3.3.1-1.1ubuntu1.3|libpcre3:amd64,2:8.38-3.1|libperl5.22:amd64,5.22.1-9ubuntu0.9|libpipeline1:amd64,1.4.1-2|libplymouth4:amd64,0.9.2-3ubuntu13.5|libpng12-0:amd64,1.2.54-1ubuntu1.1|libpopt0:amd64,1.16-10|libprocps4:amd64,2:3.3.10-4ubuntu2.5|libpython3-stdlib:amd64,3.5.1-3|libpython3.5-minimal:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5-stdlib:amd64,3.5.2-2ubuntu0~16.04.12|libpython3.5:amd64,3.5.2-2ubuntu0~16.04.12|libreadline5:amd64,5.2+dfsg-3build1|libreadline6:amd64,6.3-8ubuntu2|libroken18-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|librtmp1:amd64,2.4+20151223.gitfa8646d-1ubuntu0.1|libsasl2-2:amd64,2.1.26.dfsg1-14ubuntu0.2|libsasl2-modules-db:amd64,2.1.26.dfsg1-14ubuntu0.2|libseccomp2:amd64,2.4.3-1ubuntu3.16.04.3|libselinux1:amd64,2.4-3build2|libsemanage-common,2.3-1build3|libsemanage1:amd64,2.3-1build3|libsepol1:amd64,2.4-2|libsigc++-2.0-0v5:amd64,2.6.2-1|libsigsegv2:amd64,2.10-4|libslang2:amd64,2.3.0-2ubuntu1.1|libsmartcols1:amd64,2.27.1-6ubuntu3.10|libsqlite3-0:amd64,3.11.0-1ubuntu1.5|libss2:amd64,1.42.13-1ubuntu1.2|libssl1.0.0:amd64,1.0.2g-1ubuntu4.18|libstdc++6:amd64,5.4.0-6ubuntu1~16.04.12|libsystemd0:amd64,229-4ubuntu21.29|libtasn1-6:amd64,4.7-3ubuntu0.16.04.3|libterm-readkey-perl,2.33-1build1|libtext-charwidth-perl,0.04-7build5|libtext-iconv-perl,1.7-5build4|libtext-wrapi18n-perl,0.06-7.1|libtinfo5:amd64,6.0+20160213-1ubuntu1|libudev1:amd64,229-4ubuntu21.29|libusb-0.1-4:amd64,2:0.1.12-28|libusb-1.0-0:amd64,2:1.0.20-1|libustr-1.0-1:amd64,1.0.4-5|libuuid1:amd64,2.27.1-6ubuntu3.10|libwind0-heimdal:amd64,1.7~git20150920+dfsg-4ubuntu1.16.04.1|libwrap0:amd64,7.6.q-25|libxapian22v5:amd64,1.2.22-2|libxml2:amd64,2.9.3+dfsg1-1ubuntu0.7|libxtables11:amd64,1.6.0-2ubuntu3|libyaml-0-2:amd64,0.1.6-3|linux-base,4.5ubuntu1.2~16.04.1|linux-firmware,1.157.23|linux-image-4.4.0-197-generic,4.4.0-197.229|linux-image-4.4.0-198-generic,4.4.0-198.230|linux-image-virtual,4.4.0.198.204|linux-modules-4.4.0-197-generic,4.4.0-197.229|linux-modules-4.4.0-198-generic,4.4.0-198.230|locales,2.23-0ubuntu11.2|login,1:4.2-3.1ubuntu5.4|logrotate,3.8.7-2ubuntu2.16.04.2|lsb-base,9.20160110ubuntu0.2|lsb-release,9.20160110ubuntu0.2|lvm2,2.02.133-1ubuntu10|m4,1.4.17-5|make,4.1-6|makedev,2.3.1-93ubuntu2~ubuntu16.04.1|man-db,2.7.5-1|mawk,1.3.3-17ubuntu2|mdadm,3.3-2ubuntu7.6|mime-support,3.59ubuntu1|mokutil,0.3.0+1538710437.fb6250f-0ubuntu2~16.04.1|mount,2.27.1-6ubuntu3.10|mtr-tiny,0.86-1ubuntu0.1|multiarch-support,2.23-0ubuntu11.2|nano,2.5.3-2ubuntu2|ncurses-base,6.0+20160213-1ubuntu1|ncurses-bin,6.0+20160213-1ubuntu1|ncurses-term,6.0+20160213-1ubuntu1|net-tools,1.60-26ubuntu1|netbase,5.3|netcat-openbsd,1.105-7ubuntu1|openssh-client,1:7.2p2-4ubuntu2.10|openssh-server,1:7.2p2-4ubuntu2.10|openssh-sftp-server,1:7.2p2-4ubuntu2.10|openssl,1.0.2g-1ubuntu4.18|passwd,1:4.2-3.1ubuntu5.4|patch,2.7.5-1ubuntu0.16.04.2|pciutils,1:3.3.1-1.1ubuntu1.3|perl,5.22.1-9ubuntu0.9|perl-base,5.22.1-9ubuntu0.9|perl-modules-5.22,5.22.1-9ubuntu0.9|pinentry-curses,0.9.7-3|plymouth,0.9.2-3ubuntu13.5|pollinate,4.33-0ubuntu1~16.04.1|portsentry,1.2-14|powermgmt-base,1.31+nmu1|procmail,3.22-25ubuntu0.16.04.1|procps,2:3.3.10-4ubuntu2.5|python-apt-common,1.1.0~beta1ubuntu0.16.04.11|python3,3.5.1-3|python3-apt,1.1.0~beta1ubuntu0.16.04.11|python3-blinker,1.3.dfsg2-1build1|python3-cffi-backend,1.5.2-1ubuntu1|python3-chardet,2.3.0-2|python3-configobj,5.0.6-2|python3-cryptography,1.2.3-1ubuntu0.3|python3-dbus,1.2.0-3|python3-gi,3.20.0-0ubuntu1|python3-idna,2.0-3|python3-jinja2,2.8-1ubuntu0.1|python3-json-pointer,1.9-3|python3-jsonpatch,1.19-3|python3-jwt,1.3.0-1ubuntu0.1|python3-markupsafe,0.23-2build2|python3-minimal,3.5.1-3|python3-oauthlib,1.0.3-1|python3-pkg-resources,20.7.0-1|python3-pyasn1,0.1.9-1|python3-pycurl,7.43.0-1ubuntu1|python3-requests,2.9.1-3ubuntu0.1|python3-serial,3.0.1-1|python3-six,1.10.0-3|python3-software-properties,0.96.20.10|python3-urllib3,1.13.1-2ubuntu0.16.04.4|python3-yaml,3.11-3build1|python3.5,3.5.2-2ubuntu0~16.04.12|python3.5-minimal,3.5.2-2ubuntu0~16.04.12|qemu-guest-agent,1:2.5+dfsg-5ubuntu10.48|readline-common,6.3-8ubuntu2|resolvconf,1.78ubuntu7|rsync,3.1.1-3ubuntu1.3|rsyslog,8.16.0-1ubuntu3.1|sbsigntool,0.6-0ubuntu10.1|sed,4.2.2-7|sendmail,8.15.2-3|sendmail-base,8.15.2-3|sendmail-bin,8.15.2-3|sendmail-cf,8.15.2-3|sensible-mda,8.15.2-3|sensible-utils,0.0.9ubuntu0.16.04.1|shim,15+1552672080.a4a1fbe-0ubuntu2|shim-signed,1.33.1~16.04.6+15+1552672080.a4a1fbe-0ubuntu2|software-properties-common,0.96.20.10|ssh-import-id,5.5-0ubuntu1|sudo,1.8.16-0ubuntu1.9|systemd,229-4ubuntu21.29|systemd-sysv,229-4ubuntu21.29|sysv-rc,2.88dsf-59.3ubuntu2|sysv-rc-conf,0.99-7|sysvinit-utils,2.88dsf-59.3ubuntu2|tar,1.28-2.1ubuntu0.1|tasksel,3.34ubuntu3|tasksel-data,3.34ubuntu3|tiger,1:3.2.3-14|tzdata,2020d-0ubuntu0.16.04|ubuntu-advantage-tools,10ubuntu0.16.04.1|ubuntu-keyring,2012.05.19.1|ucf,3.0036|udev,229-4ubuntu21.29|unattended-upgrades,1.1ubuntu1.18.04.7~16.04.6|unhide,20130526-1|ureadahead,0.100.0-19.1|usbutils,1:007-4|util-linux,2.27.1-6ubuntu3.10|vim,2:7.4.1689-3ubuntu1.5|vim-common,2:7.4.1689-3ubuntu1.5|vim-runtime,2:7.4.1689-3ubuntu1.5|vim-tiny,2:7.4.1689-3ubuntu1.5|wamerican,7.1-1|wget,1.17.1-1ubuntu1.5|whiptail,0.52.18-1ubuntu2|xfsprogs,4.3.0+nmu1ubuntu1.1|xkb-data,2.16-1ubuntu1|xz-utils,5.1.1alpha+20120614-2ubuntu2|zlib1g:amd64,1:1.2.8.dfsg-2ubuntu4.3 package_audit_tool=apt-get package_audit_tool_found=1 vulnerable_packages_found=0 hardening_index=71 tests_executed=HRDN-7231|HRDN-7230|HRDN-7222|HRDN-7220|KRNL-6000|HOME-9350|HOME-9310|HOME-9306|HOME-9304|HOME-9302|FILE-7524|MALW-3284|MALW-3282|MALW-3280|MALW-3278|MALW-3276|MALW-3275|TOOL-5190|TOOL-5126|TOOL-5130|TOOL-5122|TOOL-5120|TOOL-5104|TOOL-5102|TOOL-5002|FINT-4350|FINT-4341|FINT-4338|FINT-4330|FINT-4328|FINT-4326|FINT-4322|FINT-4318|FINT-4314|FINT-4310|MACF-6290|RBAC-6272|MACF-6240|MACF-6232|MACF-6204|CONT-8102|CRYP-8005|CRYP-8004|CRYP-8002|CRYP-7931|CRYP-7930|CRYP-7902|TIME-3185|TIME-3170|TIME-3148|TIME-3104|ACCT-9636|ACCT-9628|ACCT-9626|ACCT-9622|SCHD-7718|SCHD-7704|SCHD-7702|BANN-7130|BANN-7128|BANN-7126|BANN-7124|INSE-8320|INSE-8318|INSE-8316|INSE-8314|INSE-8322|INSE-8310|INSE-8304|INSE-8300|INSE-8102|INSE-8100|INSE-8000|LOGG-2180|LOGG-2170|LOGG-2154|LOGG-2150|LOGG-2148|LOGG-2146|LOGG-2142|LOGG-2138|LOGG-2240|LOGG-2230|LOGG-2210|LOGG-2136|LOGG-2132|LOGG-2130|SQD-3602|PHP-2211|LDAP-2219|DBS-1880|DBS-1860|DBS-1840|DBS-1826|DBS-1820|DBS-1818|DBS-1804|SNMP-3302|SSH-7440|SSH-7408|SSH-7406|SSH-7404|SSH-7402|HTTP-6702|HTTP-6622|FIRE-4594|FIRE-4590|FIRE-4586|FIRE-4524|FIRE-4513|FIRE-4512|FIRE-4508|FIRE-4502|MAIL-8880|MAIL-8860|MAIL-8838|MAIL-8820|MAIL-8814|MAIL-8802|PRNT-2314|PRNT-2304|NETW-3200|NETW-3032|NETW-3030|NETW-3028|NETW-3015|NETW-3012|NETW-3008|NETW-3006|NETW-3004|NETW-3001|NETW-2706|NETW-2705|NETW-2704|NETW-2600|NETW-2400|PKGS-7420|PKGS-7410|PKGS-7398|PKGS-7394|PKGS-7392|PKGS-7390|PKGS-7388|PKGS-7370|PKGS-7346|PKGS-7345|NAME-4408|NAME-4406|NAME-4404|NAME-4402|NAME-4304|NAME-4230|NAME-4202|NAME-4034|NAME-4032|NAME-4028|NAME-4020|NAME-4018|NAME-4016|STRG-1920|STRG-1846|USB-3000|USB-2000|USB-1000|FILE-6430|FILE-6394|FILE-6376|FILE-6374|FILE-6372|FILE-6368|FILE-6363|FILE-6362|FILE-6354|FILE-6344|FILE-6336|FILE-6332|FILE-6329|FILE-6324|FILE-6323|FILE-6311|FILE-6310|SHLL-6230|SHLL-6220|SHLL-6211|AUTH-9408|AUTH-9402|AUTH-9328|AUTH-9308|AUTH-9288|AUTH-9286|AUTH-9284|AUTH-9283|AUTH-9282|AUTH-9278|AUTH-9268|AUTH-9266|AUTH-9264|AUTH-9262|AUTH-9252|AUTH-9250|AUTH-9242|AUTH-9240|AUTH-9234|AUTH-9230|AUTH-9229|AUTH-9228|AUTH-9226|AUTH-9222|AUTH-9216|AUTH-9208|AUTH-9204|PROC-3802|PROC-3614|PROC-3612|PROC-3602|KRNL-5830|KRNL-5820|KRNL-5788|KRNL-5730|KRNL-5728|KRNL-5726|KRNL-5723|KRNL-5695|KRNL-5677|KRNL-5622|BOOT-5260|BOOT-5202|BOOT-5184|BOOT-5180|BOOT-5177|BOOT-5155|BOOT-5142|BOOT-5139|BOOT-5122|BOOT-5121|BOOT-5116|BOOT-5109|BOOT-5108|BOOT-5104|PLGN-3860|PLGN-3856|PLGN-3834|PLGN-3832|PLGN-3830|PLGN-3820|PLGN-3818|PLGN-3816|PLGN-3814|PLGN-3812|PLGN-3810|PLGN-3808|PLGN-3806|PLGN-3804|PLGN-3802|PLGN-3800|PLGN-0010|CORE-1000| tests_skipped=MALW-3288|MALW-3286|FINT-4402|FINT-4340|FINT-4339|FINT-4336|FINT-4334|FINT-4316|FINT-4315|MACF-6242|MACF-6234|MACF-6208|CONT-8108|CONT-8107|CONT-8106|CONT-8104|CONT-8004|TIME-3182|TIME-3181|TIME-3180|TIME-3160|TIME-3136|TIME-3132|TIME-3128|TIME-3124|TIME-3120|TIME-3116|TIME-3112|TIME-3106|ACCT-9662|ACCT-9660|ACCT-9656|ACCT-9654|ACCT-9652|ACCT-9650|ACCT-9634|ACCT-9632|ACCT-9630|ACCT-2760|ACCT-2754|SCHD-7724|SCHD-7720|BANN-7113|INSE-8050|INSE-8200|INSE-8116|INSE-8106|INSE-8104|INSE-8016|INSE-8006|INSE-8004|INSE-8002|LOGG-2192|LOGG-2190|LOGG-2164|LOGG-2162|LOGG-2160|LOGG-2153|LOGG-2152|LOGG-2134|SQD-3680|SQD-3630|SQD-3624|SQD-3620|SQD-3616|SQD-3614|SQD-3613|SQD-3610|SQD-3606|SQD-3604|PHP-2382|PHP-2378|PHP-2376|PHP-2374|PHP-2372|PHP-2368|PHP-2320|LDAP-2224|DBS-1888|DBS-1886|DBS-1884|DBS-1882|DBS-1828|DBS-1816|SNMP-3306|SNMP-3304|HTTP-6720|HTTP-6716|HTTP-6714|HTTP-6712|HTTP-6710|HTTP-6708|HTTP-6706|HTTP-6704|HTTP-6643|HTTP-6641|HTTP-6640|HTTP-6632|HTTP-6626|HTTP-6624|FIRE-4540|FIRE-4538|FIRE-4536|FIRE-4534|FIRE-4532|FIRE-4530|FIRE-4526|FIRE-4520|FIRE-4518|MAIL-8920|MAIL-8818|MAIL-8817|MAIL-8816|MAIL-8804|PRNT-2420|PRNT-2418|PRNT-2316|PRNT-2308|PRNT-2307|PRNT-2306|PRNT-2302|NETW-3014|PKGS-7393|PKGS-7387|PKGS-7386|PKGS-7384|PKGS-7383|PKGS-7382|PKGS-7381|PKGS-7380|PKGS-7378|PKGS-7366|PKGS-7354|PKGS-7352|PKGS-7350|PKGS-7348|PKGS-7334|PKGS-7332|PKGS-7330|PKGS-7328|PKGS-7322|PKGS-7320|PKGS-7314|PKGS-7312|PKGS-7310|PKGS-7308|PKGS-7306|PKGS-7304|PKGS-7303|PKGS-7302|PKGS-7301|NAME-4306|NAME-4238|NAME-4236|NAME-4232|NAME-4210|NAME-4206|NAME-4204|NAME-4036|NAME-4026|NAME-4024|STRG-1930|STRG-1928|STRG-1926|STRG-1906|STRG-1904|STRG-1902|FILE-6410|FILE-6439|FILE-6330|FILE-6312|SHLL-6202|AUTH-9410|AUTH-9409|AUTH-9406|AUTH-9340|AUTH-9306|AUTH-9304|AUTH-9254|AUTH-9218|AUTH-9212|PROC-3604|KRNL-5770|KRNL-5831|KRNL-5745|BOOT-5264|BOOT-5263|BOOT-5262|BOOT-5170|BOOT-5165|BOOT-5159|BOOT-5126|BOOT-5261|BOOT-5124|BOOT-5117|BOOT-5106|BOOT-5102|PLGN-0008| finish=true