# Installer lynis avec Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de lynis pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:lynis
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install lynis
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install lynis
```

  Preuve: MacPorts ports tree: security/lynis/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add lynis
```

  Preuve: Alpine Linux edge package indexes: lynis from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install lynis
```

  Preuve: Debian stable package indexes: lynis from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install lynis
```

  Preuve: Fedora Rawhide package metadata: lynis from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#lynis
```

  Preuve: nixpkgs package indexes: pkgs/by-name/ly/lynis/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S lynis
```

  Preuve: Arch Linux sync databases: lynis from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install lynis
```

  Preuve: openSUSE Tumbleweed package metadata: lynis from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Faits du paquet

- **Clé du paquet:** brew:lynis
- **Gestionnaire de paquets:** Homebrew
- **Version:** 3.1.7
- **Résumé source:** Security and system auditing tool to harden systems
- **Page d'accueil:** <https://cisofy.com/lynis/>
- **Dépôt:** <https://github.com/CISOfy/lynis>
- **Dernière mise à jour:** 2026-06-25T09:58:01Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- lynis (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 3.1.7
## Historique du projet et usages

Lynis is an open source Unix-like system security auditing and hardening tool. It gathers security information, runs checks, and reports warnings and suggestions for administrators, auditors, security specialists, and system maintainers.

### Historique du projet

The official README traces Lynis development to May 2007, with Michael Boelen as author from 2007 to 2013 and CISOfy carrying development from 2013 onward. The project is GPLv3-licensed, written as shell scripts, and maintained at CISOfy with public development on GitHub.

Lynis was designed to run directly from an unpacked directory as well as from installed packages. Its README and documentation emphasize broad Unix coverage rather than one distribution: Linux, BSD variants, macOS, Solaris, AIX, and related Unix-like systems are all part of the supported-audit story.

The changelog shows ongoing maintenance into the 2020s, with releases adding OS detection, end-of-life databases, malware and file-integrity checks, macOS checks, package-manager checks, and many platform-specific hardening tests.

### Historique d'adoption

Lynis has unusually broad packaging for a security-audit shell tool. The batch package metadata lists Alpine, Homebrew, Debian, Fedora/DNF, MacPorts, Nix, Arch, Ubuntu, and openSUSE/Zypper, while the upstream docs also mention CISOfy package repositories and custom RPM package building.

CISOfy built a commercial ecosystem around the open source tool through Lynis Enterprise, using Lynis scans as the local audit engine while adding centralized reporting, monitoring, compliance features, dashboards, and support. That commercial/open-source split helped keep Lynis relevant both as a package-manager tool and as a managed audit component.

### Modes d'utilisation

The common interactive workflow is `lynis audit system`, often run as root for a full audit. The documentation also covers quick or quiet scans, cron jobs, update checks, viewing profiles and settings, and reading `/var/log/lynis.log` after a scan to interpret findings.

Lynis uses profiles as its configuration model. The FAQ says profiles are usually stored in `/etc/lynis` or discoverable with `lynis show profiles`; the default profile warns users to put local changes in `custom.prf` beside `default.prf` rather than editing the default file.

### Pourquoi les passionnés de paquets s'y intéressent

Lynis matters to package people because it is both a packaged security utility and a package-system inspector. Its checks know about APT/dpkg, RPM/YUM, pacman, zypper, apk, Homebrew, and other platform details, so keeping it current means tracking operating-system churn, package-manager behavior, and hardening expectations across many Unix-like systems.

### Chronologie

- 2007: Lynis development begins under Michael Boelen.
- 2013: CISOfy becomes the named development organization.
- 2014: CISOfy software signing key is documented for download verification.
- 2024: Lynis 3.1.x releases add modern OS and platform checks.
- 2026: Lynis 3.1.7 is released with updated end-of-life database entries.

### Related projects

- Lynis Enterprise builds centralized reporting and compliance workflows around Lynis scan data.
- Lynis Collector is an enterprise component for collecting and uploading audit reports in batch.

### Sources

- <https://cisofy.com/documentation/lynis/>
- <https://github.com/CISOfy/lynis>
- <https://raw.githubusercontent.com/CISOfy/lynis/master/CHANGELOG.md>
- <https://raw.githubusercontent.com/CISOfy/lynis/master/FAQ>
- <https://raw.githubusercontent.com/CISOfy/lynis/master/README>
- <https://raw.githubusercontent.com/CISOfy/lynis/master/default.prf>
- source_facts.package-manager


## Notes de sécurité

narrow executable package without higher-risk signals.

- **Risque Geiger:** vert / faible
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: default.prf, custom.prf
## Autres enregistrements de gestionnaires de paquets

- Debian apt - lynis - 3.1.4-1: normalized package name match | Debian stable package indexes: lynis from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | security auditing tool for Unix based systems | https://cisofy.com/lynis/
- Nix - lynis: normalized package name match | nixpkgs package indexes: pkgs/by-name/ly/lynis/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - lynis - 3.0.9-1: normalized package name match | Ubuntu 24.04 LTS package indexes: lynis from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | security auditing tool for Unix based systems | https://cisofy.com/lynis/
- apk - lynis - 3.1.6-r0: normalized package name match | Alpine Linux edge package indexes: lynis from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Security and system auditing tool | https://cisofy.com/lynis/
- apk - lynis-bash-completion - 3.1.6-r0: normalized package name match | Alpine Linux edge package indexes: lynis-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Bash completions for lynis | https://cisofy.com/lynis/
- apk - lynis-doc - 3.1.6-r0: normalized package name match | Alpine Linux edge package indexes: lynis-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Security and system auditing tool (documentation) | https://cisofy.com/lynis/
- dnf - lynis - 3.1.7-2.fc45: normalized package name match | Fedora Rawhide package metadata: lynis from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Security and system auditing tool | https://cisofy.com/lynis/
- pacman - lynis - 3.1.7-1: normalized package name match | Arch Linux sync databases: lynis from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Security and system auditing tool to harden Unix/Linux systems | https://cisofy.com/lynis/
- zypper - lynis - 3.1.7-1.2: normalized package name match | openSUSE Tumbleweed package metadata: lynis from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Security and System auditing tool | https://cisofy.com/lynis/
- MacPorts - lynis: normalized package name match | MacPorts ports tree: security/lynis/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/lynis.yml](https://github.com/mxcl/pkgdb/blob/main/combined/lynis.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph