::Trend Micro Threat Resource Center::

16 March 2010

Collection of security checks for Linux

Linux seems to be catching up with what seems to be a Microsoft's MBSA** equivalent tool.

Buck Security is a collection of security checks for Linux. It was designed for Debian and Ubuntu servers, but can be useful for any Linux system.

The aim of Buck Security is, to allow you to get a quick overview of the security status of your system. As a Linux system administrator - but also as a normal Linux user - you often wonder if your system is secure. In this situation it is useful to get an overview of the security status of the system immediately. Buck Security was designed exactly for this. It runs important tests and returns the results to you after a couple of minutes.

By now the following tests are implemented:
  • Searching for worldwriteable files
  • Searching for worldwriteable directories
  • Searching for programs where the setuid is set
  • Searching for programs where the setgid is set
  • Checking your umask
  • Checking if the sticky-bit is set for /tmp
  • Searching for superusers
  • Searching for installed attack tools packages.
Download a copy here and try it out.

===============================================================

** Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool designed for the IT professional that helps small- and medium-sized businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems.

If you're a MS Windows user, you can download a free copy of this tool and run a check your system.