Lynis security controls


DBS-1816DatabaseEmpty root password for MySQL

No password has been set for MySQL 'root' user

DBS-1882DatabaseRedis configuration file

This Lynis control tests for file permissions of the Redis configuration file.

DBS-1884DatabaseRedis 'requirepass' option

Require a password for Redis instances to prevent unauthorized connections from connecting to your Redis instances.

DBS-1886DatabaseRedis CONFIG parameter

By default the CONFIG command can be used. To prevent users from using this command, it can be disabled or renamed for an additional level of security.

DBS-1888DatabaseRedis bind on localhost

This test determines if the 'bind' setting has been configured to listen on the localhost.