Scripts for OS security audit

["Noaman Khan" <noamank () gmail com>]

Hi all,

I need to do OS level security audit for Linux/Solaris servers. Below
are some of things i would like to check

- Operating system resources security
- Configuration settings security for OS
- Network services security such as ssh, snmp, ftp, nfs etc security
- User resources (home directories)
- whether logging is active such as failed logs etc
- password aging settings such as max age, min age
- password complexity
- password storage file security such as /etc/passwd and /etc/shadow

I know couple of tools such as tiger and some other shell scripts
which do part of what is required. Wondering if anyone know some
tool/script which do all of above.

Thanks in advance

Noaman