This is the software repository for packages provided by CISOfy.
» Are you a customer of Lynis Enterprise?
This list shows what operating systems were used to test these packages. We expect these packages to work for both older and newer versions, as no compilation was involved during packaging.
Your operating system not listed here? You can use Git or use a "Manual" deployment. This is documented in our Get Started document.
First import the GPG key. This ensures the signed repository can be checked.rpm --import https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
zypper addrepo --gpgcheck --name "CISOfy Lynis repository" --priority 1 --refresh --type rpm-md https://packages.cisofy.com/community/lynis/rpm/ lynis
Check if the repository is added:zypper repos
If the repository is available, Lynis can be installed from it. As it is marked with a high priority, the Lynis package will be installed from the new repository.zypper refresh
zypper install lynis
Ensure that cURL, NSS, openssl, and CA certificates are up-to-date.yum update ca-certificates curl nss openssl
Create /etc/yum.repos.d/cisofy-lynis.repo[lynis] name=CISOfy Software - Lynis package baseurl=https://packages.cisofy.com/community/lynis/rpm/ enabled=1 gpgkey=https://packages.cisofy.com/keys/cisofy-software-rpms-public.key gpgcheck=1
Next step is installing Lynis with yum.yum makecache fast
yum install lynis
First time it might ask to import the GPG key. This ensures you only updates are received from us.
Now you start using Lynis. First time users are advised to use the Get Started guide.lynis audit system
Like to build your own RPM? We have a Lynis spec file.git clone https://github.com/CISOfy/lynis-sdk ./lynis-devkit build rpm
Are you are a customer with an active subscription to Lynis Enterprise? Have a look in the customers section.
For these commands root access may be needed. Use sudo or run as root user.
Download the key from a central keyserver:apt-key adv --keyserver keyserver.ubuntu.com --recv-keys C80E383C3DE9F082E01391A0366C67DE91CA5D5F
Or manually import it:wget -O - http://packages.cisofy.com/keys/cisofy-software-public.key | apt-key add -
Add software repository
The software repository uses preferably HTTPS for secure transport. Install the 'https' method for APT, if it was not available yet.apt install apt-transport-https
Next step is adding the repository:echo "deb https://packages.cisofy.com/community/lynis/deb/ CODENAME main" > /etc/apt/sources.list.d/cisofy-lynis.list
Note: Replace CODENAME with your distribution name (jessie, trusty, xenial). Got another distribution version? Then use stable or testing.
Version Command Debian Debian 7 echo "deb https://packages.cisofy.com/community/lynis/deb/ wheezy main" > /etc/apt/sources.list.d/cisofy-lynis.list Debian 8 echo "deb https://packages.cisofy.com/community/lynis/deb/ jessie main" > /etc/apt/sources.list.d/cisofy-lynis.list Debian (other versions) echo "deb https://packages.cisofy.com/community/lynis/deb/ stable main" > /etc/apt/sources.list.d/cisofy-lynis.list Ubuntu Ubuntu 14.04 echo "deb https://packages.cisofy.com/community/lynis/deb/ trusty main" > /etc/apt/sources.list.d/cisofy-lynis.list Ubuntu 16.04 echo "deb https://packages.cisofy.com/community/lynis/deb/ xenial main" > /etc/apt/sources.list.d/cisofy-lynis.list Ubuntu (other versions) echo "deb https://packages.cisofy.com/community/lynis/deb/ stable main" > /etc/apt/sources.list.d/cisofy-lynis.list Other Debian derivatives (like Kali) Stable repository echo "deb https://packages.cisofy.com/community/lynis/deb/ stable main" > /etc/apt/sources.list.d/cisofy-lynis.list
Refresh the local package database with the new repository data and install Lynis:apt update
Got an error after running this command? Check if you filled in the 'codename' correctly and the line is correct. It are those small details that may prevent it from working.apt install lynis
Note, older Ubuntu versions may need apt-get install lynis
Confirm Lynis versionlynis show version
Is your version not the latest? Run
apt-cache policy lynisto see where your package came from.
If you keep receiving an old version from your distribution, 'pin' the Lynis package. Create the file /etc/apt/preferences.d/lynis with the following contents:Package: lynis Pin: origin packages.cisofy.com Pin-Priority: 600