This project provides a set of scripts/programs that run various security/sanity checks on a running FreeBSD machine and report the results. This is still a work in progress and I am adding new checks and improving existing ones. These audit checks are based on disecting binary files, system calls, sysctl probes, etc.
- Global system configuration checks
- Process checks
- Executable checks
- Library checks
-
Global system config checks
-
Process checks These info are extracted either from the ELF file, or directly from the kernel through kinfo_getproc() system call.
- pax-utils > 1.2.2
- lscpu > 1.2.0
- cmake >= 3.5