YASAT(8)

👑 YASAT — NAME 💖

okay so bestie, meet YASAT — a simple stupid audit tool. no cap, that's literally its name. it's giving "chaotic but brilliant" energy, and honestly? same.

✨ SYNOPSIS ✨

yasat [--standard(-s)] [--list(-l)] [--debug(-d)] [--help(-h)]
[--html(-H)] [--html-output PATH] [--advice-lang LANG] [--full-scan(-f)]
[--plugins-dir(-P) PATH] [--nopause(-a)] [--plugin(-1) PATH]
[--scanroot(-r) PATH] [--Plugin(-p) NAME] [--print-level X] [--check-
update]

🌸 DESCRIPTION 🌸

So YASAT stands for Yet Another Stupid Audit Tool and it is, quote unquote, a simple stupid audit tool. and like… that's the whole vibe. it wants to be as simple as humanly possible, with the absolute minimum of binary dependencies — literally just sed, grep and cut. that's it. that's the roster. 🎀

Second goal (because it's ambitious like that 💅): it documents each and every test with maximum information plus links to the official documentation. so when it yells at you about something, it also tells you why, with receipts. iconic behaviour, truly.

It runs a whole bunch of tests checking for security configuration issues or other good-practice stuff.

It checks many software configurations, like: Apache, Bind DNS, CUPS, PHP, kernel configuration, MySQL, network configuration, openvpn, Packages update, samba, snmpd, squid, tomcat, user accounting, vsftpd, xinetd, — like it is not playing around, it audits everybody. 🫶

💅 OPTIONS 💅

okay this is the part where you sit down, grab a snack, and read every single one. no skimming bestie, they all matter. 🍓

• --standard, -a — YASAT performs a standard check of the system, printing out the results of each test to stdout. A log is also created in ~/.yasat/yasat.result by default.
• --list, -l — lists all plugins available. window shopping, but for tests. 🛍️
• --html, -H — YASAT exports results in html (default to ~/yasat/yasat.html).
• --html-output PATH — with -H, this option lets you change the file where the html output gets stored. pick your own destination, main character energy.
• --advice-lang LANG — by default YASAT prints messages in english (EN), but you can change the displayed lang with this option. LANG is the 2letter digit of the lang you want. For the moment only EN is supported. 🗣️
• --full-scan, -f — YASAT does extra (long) tests. lots of find. it's giving long haul, so hydrate. 💧
• --plugins-dir PATH, -P — set the path where YASAT can find plugins to use. (default is ./plugins)
• --nopause, -a — by default, YASAT makes a pause after each plugin. for automatized tests you can use this. no breaks, we go straight through. 🔥
• --plugin PATH, -1 — YASAT will just use the plugin pointed to by PATH (ex: yasat -1 kernel)
• --scanroot PATH, -r — YASAT scans PATH instead of / (ex: yasat -r /mnt/centos6)
• --compliance TYPE — YASAT checks for a specific compliance (nsa, cce, or all) and prints the compliance results. ✅
• --print-level x, -1 — YASAT prints infos equal or above the level X. (All = 0 (default), infos = 1, warnings(orange) = 2, errors(red) = 3)
• --skip TEST — a comma separated list of tests to skip without the .test (ex: --skip nfs,ntp). See yasat --list for all tests. ghosting tests is valid, bestie. 🙈
• --check-update — checks if an update of YASAT exists.
• --send-support — like --check-update, but it will also send your OS version as a parameter for statistics. In the future, perhaps also a sort of send_bugs.

⚠️ heads up: -a shows up twice in this list (--standard and --nopause), and -1 shows up twice too (--plugin and --print-level). that's straight from the source, no edits, no fixes. copy the manpage, not my problem. 💀

🌈 LICENSING 🌈

YASAT is licensed under the GPL v3 license and is under development by LABBE Corentin. protect that man at all costs. 👑

📬 CONTACT INFORMATION 📬

All contacts informations could be found at http://yasat.sourceforge.net/ — go say hi, or at least lurk. 💜

and that's the whole page, bestie!! this is YASAT version 848, dated 30 August 2015 ✨ — shoutout to the YASAT(8) manual section for holding it down. now go audit something and slay. 💖🦋🎀