I'm looking for a tool, that scans unix operating systems for configuration issues. E.g. a script that finds
in the ssh config file or with other words: a script that automates compliance checks. Since there are quite a few configuration files with security relevant configurations, that lie in all sorts of different places already differing from linux distribution to linux distribution, I'd rather check if that exists before I start writing my own script. :)
What I was able to find so far is:
Vulnerability scanner Nessus supports UNIX Configuration Auditing. As far as I could see, it reads only the list of installed packets and then checks if there are vulnerabilities in those
eEye has a tool called Retina of which I'm not sure, if it's for windows only, and what it checks exactly.
BastilleLinux, BastilleMac, which tests and hardens. It is still shiped with current Ubuntu version, and it says on their website, that they'll be restarting development, I can't see any updates.
Do you know of a tool (preferably OpenSource so I can edit/contribute), that might match better?