Lynis security controls

Lynis tests if Squid is running

This test determines where Squid has its configuration stored.

This test determines what version of Squid is available on the system.

-

The configuration permissions of the Squid configuration file should be as strict as possible. By default it may be world readable, or worse.

Lynis retrieves the authentication methods that are configured within Squid. If none are found, the proxy may allow access from untrusted or unknown users.

Limit the upper size of replies within the Squid proxy configuration. This helps to protect resource exhaustion within Squid and thwart malicious attempts.

This Lynis test determines if Squid may reveal its version