Software: webserver = too many arguments errors at line 772

[centminmod]

manually installed lynis 2.0 tarball on CentOS 7 system which has my own centminmod.com LEMP web stack installed.

running command

lynis --auditor "centminmod.com initial run" -c -Q --profile /usr/local/lynis/default.prf

gives me errors at

[+] Software: webserver
------------------------------------
  - Checking Apache                                           [ NOT FOUND ]
  - Checking nginx                                            [ FOUND ]
    - Searching nginx configuration file                      [ FOUND ]
      - Found nginx includes                                  [ 7 FOUND ]
    - Parsing configuration options
./include/functions: line 772: [: too many arguments
./include/functions: line 772: [: too many arguments
./include/functions: line 772: [: too many arguments
      - SSL configured                                        [ NO ]
      - Checking log file configuration
        - Missing log files (access_log)                      [ NO ]
        - Disabled access logging                             [ NO ]
        - Missing log files (error_log)                       [ NO ]
        - Debugging mode on error_log                         [ NO ]

my Nginx stack is source compiled with following options

nginx -V
nginx version: nginx/1.7.10
built by gcc 4.8.2 20140120 (Red Hat 4.8.2-16) (GCC) 
TLS SNI support enabled
configure arguments: --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_ssl_module --with-http_gzip_static_module --with-http_stub_status_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module --with-http_secure_link_module --with-http_flv_module --with-http_realip_module --with-openssl-opt=enable-tlsext --add-module=../ngx-fancyindex-ngx-fancyindex --add-module=../ngx_cache_purge-2.3 --add-module=../headers-more-nginx-module-0.25 --add-module=../nginx-accesskey-2.0.3 --add-module=../nginx-http-concat-master --with-http_dav_module --add-module=../nginx-dav-ext-module-0.0.3 --add-module=../openresty-memc-nginx-module-1518da4 --add-module=../openresty-srcache-nginx-module-ffa9ab7 --add-module=../nginx-sticky-module-1.2.5 --add-module=../nginx_upstream_check_module-0.3.0 --with-openssl=../openssl-1.0.2 --with-libatomic --with-pcre=../pcre-8.36 --with-pcre-jit --with-http_spdy_module --add-module=../ngx_pagespeed-release-1.9.32.3-beta

[mboelen]

Patch submitted. Can you check if this removes the warning message?

[mboelen]

@centminmod does it work for you correctly with the latest changes?

[mboelen]

Timed out, considering issue resolved.

[centminmod]

sorry for late reply been sick with the flu :(

just tested and same error

[+] Software: webserver
------------------------------------
  - Checking Apache                                           [ NOT FOUND ]
  - Checking nginx                                            [ FOUND ]
    - Searching nginx configuration file                      [ FOUND ]
      - Found nginx includes                                  [ 6 FOUND ]
    - Parsing configuration options
./include/functions: line 781: [: too many arguments
      - Checking log file configuration
        - Missing log files (access_log)                      [ NO ]
        - Disabled access logging                             [ NO ]
        - Missing log files (error_log)                       [ NO ]
        - Debugging mode on error_log                         [ NO ]

version

 == Lynis ==

  Version         : 2.1.0
  Status          : Up-to-date
  Release date    : 16 April 2015
  Update location : https://cisofy.com

nginx

nginx -V
nginx version: nginx/1.9.0
built by gcc 4.8.3 20140911 (Red Hat 4.8.3-9) (GCC) 
built with OpenSSL 1.0.2a 19 Mar 2015
TLS SNI support enabled
configure arguments: --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_ssl_module --with-http_gzip_static_module --with-http_stub_status_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module --with-http_secure_link_module --with-http_flv_module --with-http_realip_module --with-http_geoip_module --with-openssl-opt=enable-tlsext --add-module=../ngx-fancyindex-ngx-fancyindex --add-module=../ngx_cache_purge-2.3 --add-module=../headers-more-nginx-module-0.25 --add-module=../nginx-accesskey-2.0.3 --add-module=../nginx-http-concat-master --with-http_dav_module --add-module=../nginx-dav-ext-module-0.0.3 --add-module=../openresty-memc-nginx-module-1518da4 --add-module=../openresty-srcache-nginx-module-ffa9ab7 --add-module=../nginx_upstream_check_module-0.3.0 --with-openssl=../openssl-1.0.2a --with-libatomic --with-stream --with-pcre=../pcre-8.36 --with-pcre-jit --with-http_spdy_module --add-module=../ngx_pagespeed-release-1.9.32.3-beta

[mboelen]

No worries, glad that you do confirm now.

I've made another change in the meantime. Can you check?
If it does not work, please share the access_log lines from your configuration.

[centminmod]

here's my access_log lines in nginx.conf

access_log  logs/access.log combined buffer=128k flush=15m;
error_log   logs/error.log warn;

tried again and exact same error as from #25 (comment)

[mboelen]

Does it work with the latest patch? (I edited by previous comment, due to this patch)

[centminmod]

doh sorry i install Lynix via a shell script and it was set to latest tag via github not the master branch

  cd /usr/local
  git clone https://github.com/CISOfy/Lynis.git lynis
  cd lynis
  LATEST_TAG=$(git tag | sort -V | tail -1)
  git branch -a
  git branch -D lynis-local
  git checkout -b lynis-local $LATEST_TAG

where's the patch ? you mean latest master commits ?

[centminmod]

latest master branch Lynis works without the too many arguments error 👍

[+] Software: webserver
------------------------------------
  - Checking Apache                                           [ NOT FOUND ]
  - Checking nginx                                            [ FOUND ]
    - Searching nginx configuration file                      [ FOUND ]
      - Found nginx includes                                  [ 6 FOUND ]
    - Parsing configuration options
      - Checking log file configuration
        - Missing log files (access_log)                      [ NO ]
        - Disabled access logging                             [ NO ]
        - Missing log files (error_log)                       [ NO ]
        - Debugging mode on error_log                         [ NO ]

[mboelen]

Great, in that case closing the issue. Thanks again for reporting it.