George A. Theall wrote: > On Mar 27, 2008, at 10:58 AM, Pedro Pozuelo wrote: > >> I usually launch scans with user www-data and that is usually the >> owner of >> nessusrc; but time to time I have notice that client cannot read it >> and I >> have realized that the owner has changed (becoming root) > > The commandline client rewrites the client configuration file each > time it is used to run a scan. >
Thanks for replying. I believe it must be that. I'll do some tests but I was driving me crazy and I finally have a clue. >> I have looked for a cron job, a pattern or anything that could have >> done >> this, but I have found nothing. > > Have you tried correlating the timestamp on the config file when > ownership is changed to your log files? For example, nessusd.messages > should tell you when a Nessus user launches a scan. > > George That will be my first check once I can repeat the error scenario Thanks again! _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
