Audit system security with Lynis
Run hundreds of security checks against your server and get a hardening index plus specific fix suggestions — no agent required.
Run `sudo lynis audit system` to execute the full audit, then scroll to the Suggestions section for prioritized fixes.
01Command
Command
$ sudo lynis audit system02What it does
Lynis inspects SSH config, permissions, firewall state, kernel settings, package hygiene, and more, then prints a hardening index and a numbered Suggestions list ranked by impact. It only reads and reports — it never modifies your system — which makes it safe to run on production, though the scan takes a few minutes. Follow up each suggestion code (e.g. SSH-7408) in the documentation, and run it periodically to track whether your hardening score improves.
03Risk
04Undo
✓No undo needed — this command does not change persistent state.
05Sources
- Lynis DocumentationEvidence: Official documentation describing `lynis audit system`, the tests performed, and the hardening index output.
Last verified: 2026-09-17 · Category: Security & Privacy