lynis

Check for updates

$ sudo lynis update info

$ sudo lynis audit system

$ sudo lynis audit dockerfile [path/to/Dockerfile]

lynis [mode] [options]

lynis is a security auditing tool for Unix-based systems. It performs an extensive health scan covering system hardening, vulnerability scanning, and compliance testing.

audit system

Perform full system security audit

Audit a Dockerfile for security issues

Check for lynis updates

List available audit profiles

Display current settings

Run as cronjob (non-interactive)

Quick mode (fewer tests)

Perform penetration testing scan

Requires root privileges for complete audit. Reports are stored in /var/log/lynis-report.dat. Some tests may be distribution-specific.

Developed by CISOfy as an open-source security auditing tool, evolved from rkhunter concepts with broader security coverage.

rkhunter(8), chkrootkit(8)