Hello Michael, I am aware of the configuration option you mention but i decided to create a patch changing the CheckUpdates() function because i don't know if it is used in another part of the software.
I also can understand your desire to know where and when an Lynis audit is performed but it shouldn't be done without user knowledge. It is up to the user to decide to check if an update is available or to decide if he wants to get informed about it. If users give consent to check for updates each time an audit is performed -which it must be done phoning home, for obvious reasons- then it is ok for you to use this info. Anyway, i believe that this function should be disabled in Debian. It does not make much sense for distros as they has their own updating system. Except for this matter, i believe that Lynis is a good piece of software. Greetings, Marcos
