Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
Run a complete local audit with sudo lynis audit system. Running as root lets Lynis inspect substantially more of the operating system than an unprivileged session. Review the warnings and suggestions, make only changes that fit your VPS, then run the same audit again and compare the reports.
What Lynis audits on a VPS
Lynis is a local UNIX-like-system security auditing and hardening tool. It examines operating-system configuration, installed software and security controls, then records warnings, suggestions and discovered data for review. It is an audit assistant, not an automatic “secure” button: you remain responsible for deciding whether a recommendation is appropriate for the services your VPS runs.
A web server, mail server, database host, container host and single-purpose application server can legitimately have different configurations. A recommendation that improves one machine can break another if applied without checking dependencies.
What it does not replace
- Patch and update management
- Secure application and database configuration
- Firewall and network segmentation controls
- Backups and restoration testing
- Monitoring, alerting and incident response
- An independent compliance or penetration assessment
The project documentation does not establish a universal accuracy percentage, guaranteed compliance outcome or score threshold. Treat the output as prioritized evidence for administrative review rather than a certification.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Before you start
Access and preparation
- Have an administrator account that can use
sudo, or direct root access. - Know the VPS role and the services that must remain available.
- Ensure the operating system and kernel are supported and fully patched.
- Have a current backup and a tested recovery path before changing authentication, firewall or boot settings.
- Plan a maintenance window for changes that could interrupt SSH, networking or application services.
Run the first audit before remediation so you have a baseline. Save the date, host identity and Lynis version with the report.
Check the execution context
Confirm that your shell is on the VPS you intend to audit, rather than on a jump host or local workstation. Record the hostname, distribution release, kernel version and the account used to launch Lynis. This prevents a report from being attached to the wrong asset and helps explain differences after a migration or kernel update.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Keep an administrative console, a second SSH session or an out-of-band recovery method available while changing SSH, firewall or boot settings. If a change causes a lockout, you need a path that does not depend on the setting you just edited.
Install Lynis
Debian or Ubuntu using the distribution package
Package installation is the quickest path when a suitable package is available and makes updates straightforward:
sudo apt update
sudo apt install lynis
lynis show version
sudo lynis audit systemThe installed version can lag behind the current project release. Check the version after installation; if it is stale or unavailable, use the current CISOfy repository, tarball or Git instructions instead. Kali’s tool page showed package version 3.1.6 when accessed on 2026-10-15, but package versions change as distributions publish updates.
On RPM-based systems, use the distribution’s Lynis package manager workflow and then run lynis show version. Do not assume that package names, repository locations or service-manager behavior are identical across distributions. The project’s current package and release instructions are the authority for obtaining a newer build.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Using a Git checkout or tarball
Lynis can run directly from an extracted archive or cloned repository; compilation and a traditional installation are not required. From the directory containing the checkout, run:
./lynis audit systemIf you run a Git checkout as root, change ownership of the checkout to root so Lynis does not warn about files owned by an unprivileged user:
sudo chown -R 0:0 /path/to/lynisUse the project’s current installation instructions for repository URLs, release files and update procedures. Keep one clearly identified version per host so later report comparisons are meaningful. If you schedule a checkout directly, use an absolute path in the job and update it deliberately rather than silently changing the executable underneath an audit.
Run a full local audit
The standard command for a VPS is:
sudo lynis audit systemUbuntu’s command reference notes that root is not strictly required, but sudo or root access provides more detail. Without elevated privileges, tests that need to inspect protected files, services or kernel settings may be skipped.
What you will see
Lynis runs a series of tests and prints progress, warnings and suggestions in the terminal. Let the command finish unless you are deliberately stopping it for an operational reason. Record the host, date, Lynis version and any changes made between runs.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
The first run is an inventory exercise as much as a hardening exercise. Note which package manager, init system, firewall framework, logging stack and authentication modules are present. A missing test can be a legitimate platform difference, while a skipped test caused by permissions is an information gap that should be corrected.
Non-privileged penetration-testing mode
For a limited view when you cannot obtain root access, use:
lynis audit system --pentestThis mode is useful for seeing what an ordinary account can observe, but it intentionally skips root-only tests. Do not treat a pentest-mode report as equivalent to a privileged system audit. Label it clearly if you send it to another administrator or store it in a central dashboard.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Remote audit syntax
The command reference also documents:
lynis audit system remote <host>A remote scan is a different workflow with its own access and trust considerations. For a normal VPS assessment, run Lynis locally on the machine being evaluated. A remote invocation may require credentials, network reachability and an approved method for transferring results; confirm those requirements in the installed command reference before using it on production hosts.
Useful command options
Check available options on the installed version with lynis show help. Common operational options include:
| Purpose | Command | When to use it |
|---|---|---|
| Full privileged audit | sudo lynis audit system |
Interactive baseline or remediation check |
| Unprivileged view | lynis audit system --pentest |
When root access is unavailable; expect skipped tests |
| Cron-safe output | sudo lynis audit system --cronjob --no-colors |
Scheduled jobs and log collection |
| Quick non-interactive run | sudo lynis audit system --quick |
When you need a shorter, non-interactive invocation |
| Run selected groups | sudo lynis audit system --tests-from-group <group> |
Focused review after checking groups with lynis show groups |
| Run selected test IDs | sudo lynis audit system --tests <test-id> |
Rechecking a known control instead of the whole audit |
| Warnings only | sudo lynis audit system --warnings-only |
Monitoring jobs that should emit only warnings |
| Controlled report path | sudo lynis audit system --report-file <file> |
Archiving reports in a designated directory |
Option names and behavior can vary by Lynis version. Verify them with the local help output before placing a command in automation.
Choosing focused tests
Use lynis show groups before selecting a group, because valid names depend on the installed release. A focused run is useful after changing one subsystem, such as authentication or logging, but it is not a replacement for a periodic full audit. Likewise, test IDs are convenient for a regression check only when you preserve the exact IDs and version used.
Free tools Windows power users keep installed
One-click scans. No signup required.
For unattended jobs, combine --cronjob with --no-colors so control characters do not pollute logs. Add --quick only when the reduced, non-interactive behavior is acceptable. A monitoring script can use --warnings-only, but retain the complete report for investigation rather than discarding all non-warning context.
Find the log and report
The default log is /var/log/lynis.log. Common packages also write the findings and discovered data to /var/log/lynis-report.dat. A report path can be changed with --report-file.
sudo less /var/log/lynis.log
sudo less /var/log/lynis-report.dat
grep -E '^(warning|suggestion)' /var/log/lynis-report.datReport keys can differ between Lynis versions, so inspect a sample before building a parser or alert rule around them. Protect report files: they can reveal hostnames, installed software, paths, service state and other configuration details. Restrict permissions and include them in your retention and deletion policy.
When a report is collected centrally, encrypt the transfer and limit access to administrators who need it. Avoid placing reports in a world-readable web directory or attaching them to tickets that contain a broader audience than necessary. If a report includes secrets or sensitive paths, follow your organization’s procedure for sanitizing or deleting it.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Keep a baseline
Copy the report to a dated, access-controlled location after each planned audit. Keep the original version information alongside it. The documented report format supports comparing differences between audits, which is more useful than looking at an isolated score or terminal screenshot.
Name files with a stable host identifier and timestamp, and note whether the run was privileged, pentest-mode or focused on a test group. This metadata makes it possible to distinguish an actual configuration change from a change in execution context. Retain enough history to show remediation and approved exceptions, then delete older copies according to your security-retention policy.
Interpret warnings and suggestions safely
Start with risk and exposure
Review warnings first, then suggestions that affect externally reachable services, authentication, privilege boundaries, logging or data protection. For each item, record:
- The Lynis test ID and exact finding
- The affected component or file
- The current state observed on the VPS
- The proposed change and its expected benefit
- The service owner and maintenance window
- A rollback method and validation test
Confirm that the service or behavior is actually needed. Removing an unused daemon, disabling an unnecessary listener or tightening an account can reduce exposure. Changing an active SSH, firewall, boot-loader or database setting without an alternate access path can lock you out.
Validate before editing
- Read the complete finding, not just its short title.
- Identify the configuration file, package or service involved.
- Check vendor and distribution documentation for the installed version.
- Compare the recommendation with your application requirements and compliance baseline.
- Make one related change at a time where practical.
- Test the service locally and from an allowed administrative network.
- Record the result and rollback details.
Do not apply every suggestion merely to increase a hardening index. Some recommendations trade convenience, compatibility or performance for a narrower security benefit. An accepted finding is valid when it is documented, understood and covered by another control or a deliberate risk decision.
Examples of deliberate exceptions
A mail server may need a network listener that a single-purpose web host does not. A container host may require kernel or namespace settings that would be unnecessary on an application-only VPS. A legacy integration may still require an older authentication method while a replacement is tested. In each case, document why the setting remains, who approved it, the compensating control and a review date. The next audit should recognize the decision instead of treating it as unexplained drift.
VPS-focused review checklist
Use the audit output as an entry point for these areas:
- Operating system: Confirm the distribution, kernel and packages are supported and patched.
- SSH: Review authentication methods, root-login policy, administrative users, key protection and lockout controls. Keep a second session or console access available before changing SSH.
- Exposed services: List enabled daemons and listening ports, then remove or restrict anything the application does not require.
- Firewall: Verify default-deny behavior where appropriate, allowed administration sources and rules for every public service.
- File permissions: Check sensitive files and directories, service-account ownership and writable paths.
- Boot loader: Review boot settings and protection appropriate to the VPS platform.
- Logging and auditing: Confirm logs are generated, retained, protected from tampering and forwarded or alerted on when local storage is not enough.
- Time: Verify synchronization so logs and certificates have reliable timestamps.
- Backups: Confirm backup coverage, encryption and restoration tests outside the VPS.
- Least privilege: Run services under dedicated accounts and remove unused administrative access.
- Alerting: Use monitoring outside Lynis for availability, authentication abuse, disk capacity and suspicious activity.
Also compare the host’s actual network exposure with its intended role. Cloud-provider security groups, virtual-network ACLs and provider firewalls can allow traffic before it reaches the operating-system firewall, while local rules can block an otherwise permitted service. Review both layers and record where each control is enforced.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rerun after remediation
After changes are deployed and tested, run the same privileged command:
sudo lynis audit systemCompare the new report with the dated baseline. Confirm that the intended warning disappeared, that no new high-impact finding appeared and that the application still works. Keep accepted findings and false positives documented so the next administrator does not repeat the same investigation.
When comparing, check the Lynis version and execution mode first. A package upgrade, kernel change or switch from an unprivileged run to a root run can alter findings even when your configuration did not change. Record those factors in the change ticket and avoid attributing every difference to a single edit.
Recommended Free Tools
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Schedule recurring audits
Single VPS
A periodic cron job or system timer can run a non-interactive audit and archive its output:
sudo lynis audit system --cronjob --no-colorsUse an explicit report path when your archive layout requires one, and rotate old reports. Ensure the job’s environment includes the correct executable path, has permission to write its destination and does not expose reports to untrusted users.
Test the scheduled command manually under the same account and environment before enabling it. Cron has a limited PATH, a different working directory and no interactive terminal. Use absolute paths, capture exit status and send failures to an administrator. A successful process exit does not by itself prove that every desired control passed, so retain and review the report.
Monitoring output
--warnings-only can reduce notification noise when a job is intended to alert on warnings. Do not use a single hardening index as your complete risk metric; combine Lynis results with patch status, service monitoring, backup checks and incident telemetry.
Multiple VPSs
For a fleet, standardize host identity, Lynis version, report naming, retention and alert thresholds. Centralize reports in an access-controlled system and distinguish a newly provisioned host from an approved exception. A fleet process should also track who accepted a finding, when it expires and what compensating control exists.
The project documents an enterprise reporting tier with a web interface, dashboard and reporting, hardening snippets, risk-based improvement plans and commercial support. Verify current licensing, deployment requirements and partner terms with CISOfy before adopting it.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshooting common problems
“Command not found”
Confirm the package installed successfully and check the executable path with your shell’s command lookup. If the distribution package is unavailable or outdated, use the current project package, archive or Git checkout.
Many tests are skipped
Run the audit with sudo. A non-privileged or --pentest run cannot inspect root-only settings. Also check that the account can read the relevant configuration and that the service manager and package tools are present.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11The report is missing
Check the terminal output for errors, inspect /var/log/lynis.log, verify permissions on /var/log and look for a custom --report-file setting in the command or scheduler. A hardened system may use a different logging policy, so confirm the actual path in the local help and configuration.
A recommendation conflicts with the application
Do not force the change. Reproduce the requirement, identify the exposed behavior, consult the application and distribution documentation, and document an exception or compensating control. Re-run Lynis after the final decision so the report reflects the current state.
Automation breaks after an upgrade
Compare the installed Lynis version and inspect a fresh report before updating parsers. Report keys and output details can change; match on documented fields and tolerate additions rather than assuming a fixed ordering.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
How to use Lynis evidence in a security program
Use the first audit to establish visibility, the remediation record to show decisions and ownership, and later reports to demonstrate change. Correlate findings with asset inventory, vulnerability management, firewall rules, identity reviews, backup tests and incident procedures. This gives you a defensible picture of risk without pretending that a local configuration audit covers every application or network failure mode.
Quick operating procedure
- Identify the VPS, its role, administrator and recovery path.
- Install Lynis from a suitable package or a current CISOfy release.
- Record the installed version with
lynis show version. - Run
sudo lynis audit systemand let it complete. - Read the log and report, protecting both files as sensitive configuration data.
- Prioritize warnings and exposed-service findings, then document owners, tests and rollback plans.
- Apply compatible changes in a maintenance window and verify service behavior.
- Rerun the same privileged audit and compare it with the baseline.
- Archive the dated report, accepted exceptions and the next review date.
- For recurring scans, use cron-safe options and review failures as well as findings.
Frequently Asked Questions
What command runs a full Lynis audit on a Linux VPS?
Run sudo lynis audit system. Sudo or root access gives the broadest coverage and reduces skipped root-only tests.
Do I need sudo to run Lynis?
Root is not strictly required, but an unprivileged run cannot inspect many protected files and settings. Use sudo lynis audit system for a normal VPS audit; use --pentest only when you deliberately want a limited non-root view.
Where does Lynis save its report?
Common packages use /var/log/lynis-report.dat, while the default log is /var/log/lynis.log. Confirm paths on your installation and use --report-file <file> when you need a controlled destination.
How should I read Lynis warnings and suggestions?
Start with warnings and recommendations affecting public services, authentication, privilege boundaries, logging and data protection. Verify the finding against your VPS role, document the proposed change and rollback, then test before applying it.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Can I run Lynis automatically from cron?
Yes. Use sudo lynis audit system --cronjob --no-colors, preferably with an explicit report path and absolute executable path. Test the job’s permissions and environment, rotate reports and alert on job failures.
Why did Lynis skip tests?
The usual cause is insufficient privilege, especially when running without sudo or with --pentest. Platform differences, missing service-manager tools or unreadable configuration can also limit coverage.
Should I apply every Lynis suggestion?
No. Suggestions are review items, not mandatory changes. Check service dependencies, compatibility, maintenance impact and your compliance baseline. Record accepted findings and compensating controls instead of changing a production system blindly.
Does Lynis replace a vulnerability scan or penetration test?
No. Lynis audits local UNIX-like-system configuration and software. Continue patch management, application testing, network controls, backups, monitoring, incident response and any independent compliance or penetration assessment your risk requires.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →How do I verify that remediation worked?
Run the same privileged audit again, compare the new report with the dated baseline and confirm the intended finding changed without introducing a higher-impact issue. Also test the affected service from an approved administrative or client network.
The Bottom Line
Install a current Lynis release, run sudo lynis audit system, protect and review the log and report, and treat every recommendation as a change-management decision. Remediate deliberately, document exceptions, then rerun the audit to prove what changed.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
