Automic VaultAutomic Vault

brew

lynis を Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper でインストール

lynis のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install lynis

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install lynis

MacPorts ports tree · security/lynis/Portfile · ソース: api.github.com

Linux

Alpine Linux apk確認済み · 92%
sudo apk add lynis

Alpine Linux edge package indexes · lynis · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install lynis

Debian stable package indexes · lynis · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install lynis

Fedora Rawhide package metadata · lynis · ソース: dl.fedoraproject.org

Nix確認済み · 92%
nix profile install nixpkgs#lynis

nixpkgs package indexes · pkgs/by-name/ly/lynis/package.nix · ソース: api.github.com

Arch Linux pacman確認済み · 92%
sudo pacman -S lynis

Arch Linux sync databases · lynis · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install lynis

openSUSE Tumbleweed package metadata · lynis · ソース: download.opensuse.org

概要

パッケージ概要

Security and system auditing tool to harden systems

コマンドとエイリアス

  • lynis

履歴

プロジェクトの歴史と使われ方

Lynis is an open source Unix-like system security auditing and hardening tool. It gathers security information, runs checks, and reports warnings and suggestions for administrators, auditors, security specialists, and system maintainers.

プロジェクトの歴史

The official README traces Lynis development to May 2007, with Michael Boelen as author from 2007 to 2013 and CISOfy carrying development from 2013 onward. The project is GPLv3-licensed, written as shell scripts, and maintained at CISOfy with public development on GitHub.

Lynis was designed to run directly from an unpacked directory as well as from installed packages. Its README and documentation emphasize broad Unix coverage rather than one distribution: Linux, BSD variants, macOS, Solaris, AIX, and related Unix-like systems are all part of the supported-audit story.

The changelog shows ongoing maintenance into the 2020s, with releases adding OS detection, end-of-life databases, malware and file-integrity checks, macOS checks, package-manager checks, and many platform-specific hardening tests.

採用の歴史

Lynis has unusually broad packaging for a security-audit shell tool. The batch package metadata lists Alpine, Homebrew, Debian, Fedora/DNF, MacPorts, Nix, Arch, Ubuntu, and openSUSE/Zypper, while the upstream docs also mention CISOfy package repositories and custom RPM package building.

CISOfy built a commercial ecosystem around the open source tool through Lynis Enterprise, using Lynis scans as the local audit engine while adding centralized reporting, monitoring, compliance features, dashboards, and support. That commercial/open-source split helped keep Lynis relevant both as a package-manager tool and as a managed audit component.

使われ方

The common interactive workflow is `lynis audit system`, often run as root for a full audit. The documentation also covers quick or quiet scans, cron jobs, update checks, viewing profiles and settings, and reading `/var/log/lynis.log` after a scan to interpret findings.

Lynis uses profiles as its configuration model. The FAQ says profiles are usually stored in `/etc/lynis` or discoverable with `lynis show profiles`; the default profile warns users to put local changes in `custom.prf` beside `default.prf` rather than editing the default file.

パッケージ好きにとっての重要性

Lynis matters to package people because it is both a packaged security utility and a package-system inspector. Its checks know about APT/dpkg, RPM/YUM, pacman, zypper, apk, Homebrew, and other platform details, so keeping it current means tracking operating-system churn, package-manager behavior, and hardening expectations across many Unix-like systems.

タイムライン

  • 2007: Lynis development begins under Michael Boelen.
  • 2013: CISOfy becomes the named development organization.
  • 2014: CISOfy software signing key is documented for download verification.
  • 2024: Lynis 3.1.x releases add modern OS and platform checks.
  • 2026: Lynis 3.1.7 is released with updated end-of-life database entries.

Related projects

  • Lynis Enterprise builds centralized reporting and compliance workflows around Lynis scan data.
  • Lynis Collector is an enterprise component for collecting and uploading audit reports in batch.

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 1 個のプラットフォームターゲットで利用できます。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
default.prfcustom.prf

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
lyniscliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-26
マネージャ版3.1.7
マネージャ更新日2026-06-25
ローカルデータOK
上流最新
検出された最新3.1.7

https://github.com/CISOfy/lynis

  • OK鮮度警告は生成されていません。

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:lynis
バージョン3.1.7
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/lynis
ホームページhttps://cisofy.com/lynis/
リポジトリhttps://github.com/CISOfy/lynis
上流ドキュメントhttps://cisofy.com/documentation/lynis
ライセンスGPL-3.0-only
ソースアーカイブhttps://github.com/CISOfy/lynis/archive/refs/tags/3.1.7.tar.gz
最終更新2026-06-25T09:58:01Z
Pulseupdated
Bottle利用可能 (対象 all)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namelynis
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

lynis 3.1.4-1

security auditing tool for Unix based systems

https://cisofy.com/lynis/

sudo apt install lynis
  • Section: utils
  • Architecture: all
  • 1 依存関係
  • 9 任意依存関係
  • normalized package name match
  • 一致条件: Lynis
Debian stable package indexes · deb.debian.org · Debian stable package indexes: lynis from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

lynis

nix profile install nixpkgs#lynis
  • normalized package name match
  • 一致条件: Lynis
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ly/lynis/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

lynis 3.0.9-1

security auditing tool for Unix based systems

https://cisofy.com/lynis/

sudo apt install lynis
  • Section: universe/utils
  • Architecture: all
  • 1 依存関係
  • 9 任意依存関係
  • normalized package name match
  • 一致条件: Lynis
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: lynis from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

lynis 3.1.4-r0

Security and system auditing tool

https://cisofy.com/lynis/

sudo apk add lynis
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: lynis
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Lynis
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: lynis from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

lynis-bash-completion 3.1.4-r0

Bash completions for lynis

https://cisofy.com/lynis/

sudo apk add lynis-bash-completion
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: lynis
  • normalized package name match
  • 一致条件: Lynis
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: lynis-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

lynis-doc 3.1.4-r0

Security and system auditing tool (documentation)

https://cisofy.com/lynis/

sudo apk add lynis-doc
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: lynis
  • normalized package name match
  • 一致条件: Lynis
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: lynis-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
dnf95%

lynis 3.1.6-2.fc44

Security and system auditing tool

https://cisofy.com/lynis/

sudo dnf install lynis
  • License: GPL-3.0-only
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: lynis
  • 4 依存関係
  • 2 提供
  • normalized package name match
  • 一致条件: Lynis
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: lynis from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

lynis 3.1.6-1

Security and system auditing tool to harden Unix/Linux systems

https://cisofy.com/lynis/

sudo pacman -S lynis
  • License: GPL-3.0-only
  • Architecture: any
  • 2 依存関係
  • 3 任意依存関係
  • normalized package name match
  • 一致条件: Lynis
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: lynis from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

lynis 3.1.6-2.2

Security and System auditing tool

https://cisofy.com/lynis/

sudo zypper install lynis
  • License: GPL-3.0-only
  • Category: System/Monitoring
  • Architecture: noarch
  • Source Package: lynis
  • 14 依存関係
  • 2 提供
  • normalized package name match
  • 一致条件: Lynis
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: lynis from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

lynis

sudo port install lynis
  • normalized package name match
  • 一致条件: Lynis
MacPorts ports tree · api.github.com · MacPorts ports tree: security/lynis/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

同じワークフロー

  • prowlerShares av.db curated category or tags: auditing, cli, security.
  • ssh-auditShares av.db curated category or tags: cli, hardening, security, security-audit.
  • checksecShares av.db curated category or tags: cli, hardening, security.
  • depsguardShares av.db curated category or tags: cli, hardening, security.
  • kubescapeShares av.db curated category or tags: cli, hardening, security.
  • nmapShares av.db curated category or tags: cli, security, security-audit.

エージェント安全ガイド

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment