[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openvas-discuss
Subject:    Re: [Openvas-discuss] first post
From:       Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?= <jfs () computer ! org>
Date:       2009-09-20 9:01:25
Message-ID: 20090920090125.GB13144 () javifsp ! no-ip ! org
[Download RAW message or body]

[Attachment #2 (multipart/signed)]

[Attachment #4 (multipart/mixed)]


On Fri, Aug 28, 2009 at 11:29:07AM +0200, Felix Wolfsteller wrote:
> Hi John,
> great offer!
> Just came to my mind:
> 
> * Jan mentioned the manpage for openvas-nvt-sync is missing (not really sure 
> if we need one).

I wrote one already yesterday for the Debian package. Please review the
attached file. If it's to everybody's pleasure feel free to commit it to SVN
or ask me to do it.

IMHO I do believe one is needed since people will probably turn to it when
they're having issues downloading updates through rsync

Regards

Javier

["openvas-nvt-sync.8" (text/plain)]

.\"                                      Hey, EMACS: -*- nroff -*-
.TH OPENVAS-NVT-SYNC 8 "Septmeber 2008" "The OpenVAS Project" "User Manuals"
.SH NAME
openvas-nvt-sync \- updates the OpenVAS security checks 
.SH SYNOPSIS
.B openvas-nvt-sync 
.SH DESCRIPTION
The 
.B OpenVAS Security Scanner
performs several security checks, each of them being coded as an external
plugin coded in NASL. As new security holes are published every day, new
plugins appear on the OpenVAS site (www.openvas.org)
.br
The script 
.B openvas-nvt-sync
will fetch all the newest security checks for you and install them at the proper
location. Once this is done you will need to restart openvas-server(8) s
so that it loads them and uses them for new security scans.

.br
.B openvas-nvt-sync
uses rsync(1) and  md5sum(1) to do its job. In order to download the
new plugins the machine where the script runs needs to have
access to rsync.openvas.org using the rsync protocol (TCP/UDP port 873).

If you are behind a web proxy you can configure rsync to use it through the
use of the RSYNC_PROXY environment variable. For more information see
rsync(1).

.SH SECURITY NOTES
.B openvas-nvt-sync 
uses rsync(1) to retrieve the archive of the new plugins. The scripts
provided by the OpenVAS project might 
.B not be signed
\. Consequently, if somewhere where to poison your DNS server and force this
script to retrieve NASL plugins on another site he would force
your OpenVAS server to execute NASL scripts when running security tests.
Even if this might not do much harm (see the NASL reference guide
for more information on that subject) you should be very careful
when doing this.

.SH SEE ALSO
For more information see:
.BR rsync(1),
.BR openvasd(8)
.BR openvas-client(1).
.br
There is more information available at
.B /usr/share/doc/openvas-plugins
on Debian systems.
.PP
You can find additional information about the OpenVAS project in
http://www.openvas.org 
			
.SH AUTHOR
This manual page was written by
Javier Fern\['a]ndez-Sanguino Pe\[~n]a <jfs@debian.org>
for the Debian GNU/Linux system (but may be used on other systems).
.PP
The 
.B openvas-nvt-sync
script was written by DN-Systems Enterprise Internet Solutions GmbH.

["signature.asc" (application/pgp-signature)]

_______________________________________________
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss


[prev in list] [next in list] [prev in thread] [next in thread]