Security scanner buck-security moves to github

Martin B — Thu, 22 Oct 2015 09:44:36 -0000

Because of some troubling developments at SourceForge buck-security has moved to github and now resides at https://github.com/davewood/buck-security. Please download the latest releases directly from github. The SourceForge page will not be updated anymore.

Security Scanner buck-security looking for a new maintainer

Martin B — Tue, 13 Oct 2015 14:27:45 -0000

The Linux security scanner buck-security is looking for a new lead developer and maintainer!
buck-security is still heavily used by many people (it was downloaded 120 times last week), unfortunately I didn't had time to continue development over the last couple of years. That doesn't mean that there isn't a lot of stuff that could be done to improve buck-security. Additional checks could be added, the usability further increased or a much needed .deb package created.

So if you are a Linux security expert with some knowledge in Perl (or a Perl expert with some knowledge in Linux security) and are interested in becoming the new maintainer of a well-established security scanner for Linux send a message to: maba4891@users.sourceforge.net

About buck-security:
buck-security is a collection of security checks for Linux written in Perl. It was designed for Debian and Ubuntu servers, but can be useful for any Linux system.

The aim of buck-security is to allow you to get a quick overview of the security status of your system. As a linux system administrator - but also as a normal linux user - you often wonder if your system is secure. In this situation it is useful to get an overvirew of the security status of the system immediately. buck-security was designed exactly for this. It runs important tests and returns the results to you after a couple of minutes.

For more information see https://en.wikipedia.org/wiki/Buck-security or http://sourceforge.net/blog/linux-system-flaws-cant-pass-buck-security/

New maintainer for buck-security

Martin B — Tue, 01 Oct 2013 11:50:57 -0000

We're happy to announce that buck-security has a new project maintainer now, user name mulhern. mulhern has worked on the integration of buck-security to the yocto project (see https://www.yoctoproject.org/blogs/andrei-dinu/2013/meta-security-layer-now-available) and provided a major patch. The patch (see http://git.yoctoproject.org/cgit/cgit.cgi/poky-contrib/commit/?h=mulhern/buck-security-final&id=786823656dce8845424cf7f0d31af48588376c4a) will be included in the next release of buck-security.

buck-security 0.6 released!

Martin B — Thu, 16 Jun 2011 08:19:32 -0000

We are proud to annouce the release ob buck-security 0.6, our security scanner for Debian and Ubuntu Linux.
buck-security is a collection of security checks for Linux. It was designed for Debian and Ubuntu servers, but can be useful for any Linux system.

There have been some major and minor changes in this release.

We added 1 new check:
- Check for listening services (learn more at http://www.buck-security.org/documentation.html#c_services\)

Minor Changes:
- improved output (more information, more compact)
- removed some deprecated files
- added a FAQ section to the website (see http://www.buck-security.org/faq.html\)
- upgraded documentation (see http://www.buck-security.org/documentation.html\)
- and many more

ATTENTION:
buck-security is still under heavy development, consider this a beta version.
If you find bugs or need help please visit our website
http://www.buck-security.org/
and feel free to contact us.

Features of the upcoming buck-security 0.6

Martin B — Mon, 12 Apr 2010 13:40:54 -0000

The next version 0.6 of buck-security will be released soon in May 2010.
buck-security is a security scanner for Linux. It was designed for Debian and Ubuntu servers, but can be useful for any Linux system.

The new version 0.6 will include major changes and 2 new checks. The most important changes will be:

* buck-security 0.6 will be provided as a debian package too
* check for running services (open ports)
* check for users that can login
* improved results output (links included where to find more information)

buck-security forums open for everyone

Martin B — Fri, 09 Apr 2010 07:12:44 -0000

The support forum for buck-security where you can ask your question and propose new features is now open for everybody (no registration needed anymore to post new topics).

Check out at http://sourceforge.net/projects/buck-security/forums

buck-security 0.5 released!

Martin B — Tue, 30 Mar 2010 15:27:29 -0000

We are proud to annouce the release ob buck-security 0.5, our security scanner for Debian and Ubuntu Linux.
Buck Security is a collection of security checks for Linux. It was designed for Debian and Ubuntu servers, but can be useful for any Linux system.

There have been some major and minor changes in this Release.

We added 3 new checks:
- Check firewall policies
- Check if sshd is secured (thanks to Jef Lui for his help)
- Make and check checksums of system programs

Minor Changes:
- Configuration is now one file
- Changed filenames for whitelists
- Improved exceptions (now as array)
- Included 'file exists' where necessary
- upgraded documentation

Follow buck-security on Twitter

Martin B — Mon, 15 Mar 2010 13:05:27 -0000

Buck-security is now on Twitter.
http://twitter.com/bucksecurity
Follow us for news, announcements and stories from behind the scenes.

New version of buck-security coming soon

Martin B — Mon, 15 Mar 2010 09:30:17 -0000

The next version of buck-security will be released soon in March 2010.

It will include major changes and new checks like:

* generate and verifiy checksums of important programs (/bin/, /sbin/,...)
* check firewall (iptables) policies
* check if sshd configuration is secure

buck-security: 0.4 released

Martin B — Mon, 27 Jul 2009 10:07:40 -0000

We are proud to annouce the release ob buck-security 0.4
Buck Security is a collection of small security checks for Linux. It was designed for Debian server, but can be useful for any Linux system.

There have been many major and minor changes.

The most important are:
- Wildcards (*) are now possible in the exceptions
- it is now possible to add checks written in perl as well
- added new check to search for superusers
- added new check to search for attack tools packages

The next version will be 0.5.

Recent posts to news