tiger

tiger

Runs the Tiger security checks on the system: accounts, permissions, services, and critical files.

Run it when you need the classic Unix security check: Tiger reviews the system — accounts (no password, duplicates), permissions of critical files (passwd, shadow, rc), services and open ports, setuid files, changes in system binaries — and reports findings by severity. It's the veteran of checking tools (TARA checks from the 90s), still useful in Unix/Linux environments. In hardening, Tiger is the basic hygiene check: modified system binary, file with incorrect permissions, and account without password are findings that modern audits also look for.

Don't use it as a complete audit: Tiger covers classic Unix checks, but not the spectrum of Lynis or OpenSCAP (kernel, modern hardening, benchmarks) — for the current hardening program, Lynis or SCAP are the reference and Tiger the historical complement. The checks generate noise on modern systems (services and paths have changed): findings are filtered by severity and role relevance. And note: Tiger detects binary changes against its reference database — without initializing the database (tiger -i) after installation, the comparison is meaningless. In containers or ephemeral systems, service and boot checks don't apply.