On Mar 27, 2008, at 10:58 AM, Pedro Pozuelo wrote:

> I usually launch scans with user www-data and that is usually the  
> owner of
> nessusrc; but time to time I have notice that client cannot read it  
> and I
> have realized that the owner has changed (becoming root)

The commandline client rewrites the client configuration file each  
time it is used to run a scan.

> I have looked for a cron job, a pattern or anything that could have  
> done
> this, but I have found nothing.

Have you tried correlating the timestamp on the config file when  
ownership is changed to your log files? For example, nessusd.messages  
should tell you when a Nessus user launches a scan.

George
-- 
[EMAIL PROTECTED]



_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to