Seccheck is a security checker for Solaris 10 that offers a range of advanced features and can be easily customized through its modular architecture.
Seccheck is a highly versatile and modular software designed for host-level security checking on Solaris 10 operating systems. As someone who was looking for a way to automate security checks on my Solaris 10 servers and receive highly detailed reports with recommendations for cybersecurity issues, I found Seccheck to be an excellent solution.
While it doesn't cover 100% of the recommended security checks from CI Security, it includes 99% of them, which I consider the most essential. For instance, I don't need to check X configuration because I don't run it on my servers. As a feature-rich tool, Seccheck has all the capabilities you need to ensure your servers are protected from cyber attacks.
Installation is easy with Seccheck. You can unpack the source distribution to any location you find suitable. The software is composed entirely of BASH shell scripts, making installation flexible with no stringent requirements. You can also specify an alternate location for the modules directory with the -m option.
Using Seccheck is simple, with its default settings scanning the modules.d directory in the same location as the Seccheck.sh script. However, you can use the -m option to choose another module location. The software scans through the modules.d for valid Seccheck modules (filename determined), with a module filename format of seccheck_nn_somename.sh. The two-digit integer 'nn' determines the order in which modules are executed, as shown in the distribution's included files.
Users can disable a module by renaming it with a suffix. For instance, appending a .NOT suffix to the module filename disables it. A template is available to help you write your own Seccheck modules. The software writes all output to STDERR and STDOUT by default. If you want to redirect output to an output file, you can use the -o option and specify an output directory, and Seccheck generates a file indicating output of the modules.
Seccheck 0.7.1 includes bugfixes in shell detection logic, the SAMBA recommendation's typo, and the use of "printf" instead of "echo" in the authlog recommendation. Overall, Seccheck is an excellent software for individuals looking for a modular, feature-rich security checker for Solaris 10 systems.
While it doesn't cover 100% of the recommended security checks from CI Security, it includes 99% of them, which I consider the most essential. For instance, I don't need to check X configuration because I don't run it on my servers. As a feature-rich tool, Seccheck has all the capabilities you need to ensure your servers are protected from cyber attacks.
Installation is easy with Seccheck. You can unpack the source distribution to any location you find suitable. The software is composed entirely of BASH shell scripts, making installation flexible with no stringent requirements. You can also specify an alternate location for the modules directory with the -m option.
Using Seccheck is simple, with its default settings scanning the modules.d directory in the same location as the Seccheck.sh script. However, you can use the -m option to choose another module location. The software scans through the modules.d for valid Seccheck modules (filename determined), with a module filename format of seccheck_nn_somename.sh. The two-digit integer 'nn' determines the order in which modules are executed, as shown in the distribution's included files.
Users can disable a module by renaming it with a suffix. For instance, appending a .NOT suffix to the module filename disables it. A template is available to help you write your own Seccheck modules. The software writes all output to STDERR and STDOUT by default. If you want to redirect output to an output file, you can use the -o option and specify an output directory, and Seccheck generates a file indicating output of the modules.
Seccheck 0.7.1 includes bugfixes in shell detection logic, the SAMBA recommendation's typo, and the use of "printf" instead of "echo" in the authlog recommendation. Overall, Seccheck is an excellent software for individuals looking for a modular, feature-rich security checker for Solaris 10 systems.
What's New
Version 0.7.5: N/A