Linux Security Auditing Tool

A checkwww module was added for checking apache conf files and ensuring that the server is not running as root. An error in checkpkgs for Debian was fixed, and more links were added to the securitylinks.txt file. The man page, modules.html, and README.modules were updated, and an INSTALL file was added.

Some items were added to checkrc.c, a checkissue module that checks the /etc/issue(.net) files was included, and a checkopenfiles module that checks open files was added. The -l switch can be used to skip checking for open files. There were also minor code cleanups and spelling fixes.

This release has minor code cleanups. String literal errors were corrected, and lsat was modified to behave nicely under gentoo linux (tested on rc1.4).

The -x option was added to skip local SUID/GUID
and world/group read/write. This will speed things
up if the user does not want to check the local
files again. A checkcfg module was added for Red
Hat and derivative of Red Hat. checkcfg prints the
output of chkconfig --list, and is the last module
run in lsat. This gives the user a visual
inspection of all services run in each runlevel.

Various buffer and index checks were added. Some
basic sshd config checks were added.