[prev in list] [next in list] [prev in thread] [next in thread]
List: openvas-discuss
Subject: Re: [Openvas-discuss] (OVAL definitions) - not applying this plugin
From: Shane Duignan <shasta90 () hotmail ! com>
Date: 2012-03-08 16:36:00
Message-ID: DUB103-W551120A1936C7C8568918DA570 () phx ! gbl
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Any ideas on why the .oval plugins are not accepted into openvas?
It
is strange as the openvas ovaldi guide specified that this must be done
and there is no information anywhere else on how to correct this.
Download ovaldi
5.5.4; this version is recommended for best results with OpenVAS.Apply this patch to \
the ovaldi source. This patch fixes a number of bugs in ovaldi which prevented ovaldi \
from running correctly when launched from within OpenVAS.Compile and install \
ovaldi.Copy the desired OVAL definitions into your OpenVAS plugin directory; make \
sure to change the file extensions from .xml to .oval.Copy the OVAL schema \
definitions (the .xsd files in the "xml" subdirectory in your OVAL installation) into \
your OpenVAS plugin directory.Restart OpenVAS Scanner; clients connecting to this \
service will now see a new plugin family called "OVAL definitions" in the plugin \
selection section.If you are using OVAL definitions that check for installed versions \
of certain packages, be sure to enable the plugin "Determine OS and list of
installed packages via SSH login" (located in the "Misc." family)
and to provide login information for the remote machine.
Firstly
ovaldi-5.5.4 is an old version of it and it does not work with the
patch so a newer version needs to be used, ovaldi-5.9.1.
Secondly,
all 5 ovaldi definition files were changed from .xml to .oval and
together with all the schema definitions added to the openvas plugins.
So why does this happen for importing all definition files:
Inconsistent data (no copyright): macos.oval (5 OVAL definitions) - not applying this \
plugin
Is Openvas not reading the ovaldi directories correctly or is the version of ovaldi \
an issue?
From: shasta90@hotmail.com
To: openvas-discuss@wald.intevation.org
Subject: (OVAL definitions) - not applying this plugin
Date: Thu, 1 Mar 2012 15:33:02 +0000
It seems that Openvas is not applying these plugins:
[Thu Mar 1 11:02:20 2012][4549] Inconsistent data (no copyright): macos.oval (5 OVAL \
definitions) - not applying this plugin [Thu Mar 1 11:02:24 2012][4549] \
Inconsistent data (no copyright): pixos.oval (3 OVAL definitions) - not applying this \
plugin [Thu Mar 1 11:02:27 2012][4549] Inconsistent data (no copyright): oval.oval \
(8254 OVAL definitions) - not applying this plugin [Thu Mar 1 11:02:31 2012][4549] \
Inconsistent data (no copyright): windows.oval (4317 OVAL definitions) - not applying \
this plugin [Thu Mar 1 11:02:35 2012][4549] Inconsistent data (no copyright): \
ios.oval (138 OVAL definitions) - not applying this plugin [Thu Mar 1 11:02:35 \
2012][4549] Inconsistent data (no copyright): unix.oval (3791 OVAL definitions) - not \
applying this plugin
> ~$ sudo tail -f /var/log/openvas/openvasad.log
lib auth:WARNING:2012-03-01 11h04.02 GMT:4576: Authentication configuration could \
not be loaded.
Based on the install guide for Ovaldi:
http://www.openvas.org/integrated-tools.html
4. Copy the desired OVAL definitions into your OpenVAS plugin directory; make sure to \
change the file extensions from .xml to .oval.
I changed them from .xml to .oval , maybe this is a mistake as they cannot be read \
and better to remove the .oval files and replace with the .xml files?
I installed Ovaldi-5.9.1-src as the recommended version of Ovaldi-5.5.4-src does not \
install even with the patch.
Any insight into this??
----------------------------------------------------------------------------------------------------------------------
Indeed I also noted that the XML scan configs to be downloaded from:
http://greenbone.net/download/
Can only be downloaded using wget and not by copying the text from a web page and \
pasting into a text editor and saving as .xml. GSA does not seem to like this file \
import so only use wget to download these files
[Attachment #5 (text/html)]
<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Any ideas on why the .oval plugins are not accepted into openvas?<br><br>It
is strange as the openvas ovaldi guide specified that this must be done
and there is no information anywhere else on how to correct \
this.<br><br><ol><li>Download <a \
href="http://downloads.sourceforge.net/ovaldi/ovaldi-5.5.4-src.tar.bz2" \
target="_blank">ovaldi 5.5.4</a>; this version is recommended for best results with \
OpenVAS.</li><li>Apply <a href="http://www.openvas.org/ovaldi-554-bugfixes.patch" \
target="_blank">this patch</a> to the ovaldi source. This patch fixes a number of \
bugs in ovaldi which prevented ovaldi from running correctly when launched from \
within OpenVAS.</li><li>Compile and install ovaldi.</li><li>Copy the desired OVAL \
definitions into your OpenVAS plugin directory; make sure to change the file \
extensions from .xml to .oval.</li><li>Copy the OVAL schema definitions (the .xsd \
files in the "xml" subdirectory in your OVAL installation) into your OpenVAS plugin \
directory.</li><li>Restart OpenVAS Scanner; clients connecting to this service will \
now see a new plugin family called "OVAL definitions" in the plugin selection
section.</li><li>If you are using OVAL definitions that check for installed versions \
of certain packages, be sure to enable the plugin "Determine OS and list of
installed packages via SSH login" (located in the "Misc." family)
and to provide login information for the remote machine.</li></ol><br>Firstly
ovaldi-5.5.4 is an old version of it and it does not work with the
patch so a newer version needs to be used, ovaldi-5.9.1.<br>Secondly,
all 5 ovaldi definition files were changed from .xml to .oval and
together with all the schema definitions added to the openvas plugins.<br><br>So why \
does this happen for importing all definition files:<br>Inconsistent data (no \
copyright): macos.oval (5 OVAL definitions) - not applying this plugin <br><br>Is \
Openvas not reading the ovaldi directories correctly or is the version of ovaldi an \
issue?<br><br><br><div><div id="SkyDrivePlaceholder"></div><hr \
id="stopSpelling">From: shasta90@hotmail.com<br>To: \
openvas-discuss@wald.intevation.org<br>Subject: (OVAL definitions) - not applying \
this plugin<br>Date: Thu, 1 Mar 2012 15:33:02 +0000<br><br>
<meta http-equiv="Content-Type" content="text/html; charset=unicode">
<meta name="Generator" content="Microsoft SafeHTML">
<div dir="ltr">
<style>
.ExternalClass .ecxhmmessage P
{padding:0px;}
.ExternalClass body.ecxhmmessage
{font-size:10pt;font-family:Tahoma;}
</style>
<div dir="ltr">It seems that Openvas is not applying these plugins:<br><br><br>[Thu \
Mar 1 11:02:20 2012][4549] Inconsistent data (no copyright): macos.oval (5 OVAL \
definitions) - not applying this plugin <br>[Thu Mar 1 11:02:24 2012][4549] \
Inconsistent data (no copyright): pixos.oval (3 OVAL definitions) - not applying this \
plugin <br>[Thu Mar 1 11:02:27 2012][4549] Inconsistent data (no copyright): \
oval.oval (8254 OVAL definitions) - not applying this plugin <br>[Thu Mar 1 11:02:31 \
2012][4549] Inconsistent data (no copyright): windows.oval (4317 OVAL definitions) - \
not applying this plugin <br>[Thu Mar 1 11:02:35 2012][4549] Inconsistent data (no \
copyright): ios.oval (138 OVAL definitions) - not applying this plugin <br>[Thu Mar \
1 11:02:35 2012][4549] Inconsistent data (no copyright): unix.oval (3791 OVAL \
definitions) - not applying this plugin <br><br><br>:~$ sudo tail -f \
/var/log/openvas/openvasad.log<br>lib auth:WARNING:2012-03-01 11h04.02 GMT:4576: \
Authentication configuration could not be loaded.<br><br><br>Based on the install \
guide for Ovaldi:<br>http://www.openvas.org/integrated-tools.html<br><br><br>4. Copy \
the desired OVAL definitions into your OpenVAS plugin directory; make sure to change \
the file extensions from .xml to .oval.<br><br><br>I changed them from .xml to .oval \
, maybe this is a mistake as they cannot be read and better to remove the .oval files \
and replace with the .xml files?<br><br><br>I installed Ovaldi-5.9.1-src as the \
recommended version of Ovaldi-5.5.4-src does not install even with the \
patch.<br><br><br>Any insight into \
this??<br><br><br><br>----------------------------------------------------------------------------------------------------------------------<br>Indeed \
I also noted that the XML scan configs to be downloaded \
from:<br>http://greenbone.net/download/<br><br><br>Can only be downloaded using wget \
and not by copying the text from a web page and pasting into a text editor and saving \
as .xml.<br>GSA does not seem to like this file import so only use wget to download \
these files<br><br><br><br><br><br><br><div><div dir="ltr"> </div></div> \
</div> </div></div> </div></body>
</html>
_______________________________________________
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic