1、lynis工具安装

mkdir /mytools cd /mytools/ wget https://cisofy.com/files/lynis-2.5.0.tar.gz tar -zxf lynis-2.5.0.tar.gz cd lynis ./lynis -h (查看帮助选项) ./lynis audit system (系统整体检测) ./lynis audit system remote 192.168.1.208 (远程扫描208服务器,需要根据提示操作)

2、日志查看 more /var/log/lynis-report.dat

查看其中的告警(WARNING)以及建议(SUGGESTION) grep Warning /var/log/lynis.log grep Suggestion /var/log/lynis.log