"Buck Security comprises a collection of security scans for Debian-based Linux distributions, including Ubuntu.
(...)
Unlike scanners such as Tiger or Lynis, Buck Security concentrates on only the most important checks, and tries not to scare users with a lot of output."
Lee Schlesinger
News: buck-security is looking for maintainer and developer
buck-security is currently looking for a maintainer and developer. buck-security is a flexible Linux security scanner with an established user base. If you are interested in improving the tool and lead its development contact davewood, the current maintainer, at github.
News: buck-security moves to github
Because of some troubling developments at SourceForge buck-security has moved to github and now resides at https://github.com/davewood/buck-security. Please download the latest releases directly from github. The SourceForge page will not be updated anymore.
Introduction
buck-security is a collection of security checks for Linux. It was designed for Debian and Ubuntu servers, but can be useful for any Linux system.
The aim of buck-security is to allow you to get a quick overview of the security status of your system. As a linux system administrator - but also as a normal linux user - you often wonder if your system is secure. In this situation it is useful to get an overvirew of the security status of the system immediately. buck-security was designed exactly for this. It runs important tests and returns the results to you after a couple of minutes.
Download latest version:
Features
By now the following tests are implemented:- Searching for worldwriteable files
- Searching for worldwriteable directories
- Searching for programs where the setuid is set
- Searching for programs where the setgid is set
- Checking your umask
- Checking if the sticky-bit is set for /tmp
- Searching for superusers
- Checking firewall policies
- Checking if sshd is secured
- Searching for listening services
- Creating and checking checksums of system programs
- Searching for installed attack tools packages
Learn more at the documentation site.