Package: lynis
Version: 1.6.3-1
Severity: minor

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

Thanks for revamping the package. It provides a systemd service and timer at
/usr/share/lynis/extras/systemd/lynis.service/timer. The header of the former
reads

# Lynis service file for systemd
# - Adjust path to link to location where Lynis binary is installed
# - Place this file together with the timer file in systemd directory
# - Run: systemctl enable lynis.service

I think it's odd that this is directed at users since the paths aren't going
to change: this could be done at build-time, and then the service and timer
installed in /etc/systemd/system/ proper. The service has a dummy path to
`lynis` for the time being, so a copy-paste doesn't suffice.

Lynis now supports a command 'lynis generate systemd-units' that sets up the
paths for you [1]. It uses 'which' to get them though, so this might be a
problem on usr-merged systems.

Don't hesitate to let me know if I can be of any assistance.

[1] 
https://github.com/CISOfy/lynis/commit/9f7e0775a57781ae6e7a247e71a149f25ef7a02d

- -- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (500, 'testing'), (2, 'unstable'), (1, 'testing-debug'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.5.0-1-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE= 
(charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lynis depends on:
ii  e2fsprogs  1.45.6-1

Versions of packages lynis recommends:
ii  menu  2.1.47+b1

Versions of packages lynis suggests:
pn  aide          <none>
ii  apt-listbugs  0.1.31
ii  debsecan      0.4.20.1
ii  debsums       2.2.5
ii  dnsutils      1:9.11.16+dfsg-2
pn  fail2ban      <none>
pn  samhain       <none>
pn  tripwire      <none>

- -- debconf-show failed

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQT287WtmxUhmhucNnhyvHFIwKstpwUCXqDiyAAKCRByvHFIwKst
pxNFAP9vWR6MSz973Z5mKigpZ9pxY1YmBMsS8gpBUIFcve7NmQD+Kjj52PBrSDKK
3Qyzz3SvPcYLKld2L8jYV5Gm9g9rQA0=
=UfTZ
-----END PGP SIGNATURE-----

Reply via email to