Author: mwiegand Date: 2008-10-24 15:28:52 +0200 (Fri, 24 Oct 2008) New Revision: 1612
Added: trunk/doc/website/pix/slad-ovaldi-results-en.png trunk/doc/website/using-slad-ovaldi.htm4 Modified: trunk/doc/website/integrated-tools.htm4 trunk/doc/website/performing_lsc.htm4 Log: More updates to SLAD documentation, added section describing the use of ovaldi with SLAD. Modified: trunk/doc/website/integrated-tools.htm4 =================================================================== --- trunk/doc/website/integrated-tools.htm4 2008-10-24 13:11:55 UTC (rev 1611) +++ trunk/doc/website/integrated-tools.htm4 2008-10-24 13:28:52 UTC (rev 1612) @@ -104,7 +104,9 @@ <li> TrapWatch <li> LM-Sensors <li> <a href="http://www.snort.org/";>snort</a> -<li> <a href="http://sourceforge.net/projects/ovaldi/";>ovaldi</a> +<li> <a href="http://sourceforge.net/projects/ovaldi/";>ovaldi</a> (NEW - see +<a href="using-slad-ovaldi.html">instructions for using ovaldi with SLAD</a> for +details) </ul> <p> Modified: trunk/doc/website/performing_lsc.htm4 =================================================================== --- trunk/doc/website/performing_lsc.htm4 2008-10-24 13:11:55 UTC (rev 1611) +++ trunk/doc/website/performing_lsc.htm4 2008-10-24 13:28:52 UTC (rev 1612) @@ -73,6 +73,22 @@ Currently, you need a rsa pkcs8 key for OpenVAS local security checks. </p> +<p> +Note: openssl will ask you for an "Encryption key" when generating your key with +the command described above. This is the passphrase you will need to remember +when using this key with OpenVAS, not the passphrase you entered when running +the ssh-keygen command. +</p> + +<p> +Important: If you plan on using this key with OpenVAS versions from the 1.0.x +series, be aware that there is a bug within OpenVAS which prevents logins with +PCKS8 key with passphrases consisting only of numbers. If you get an "Unable to +load key" error, be sure to include at least one non-numerical character in your +passphrase. +</p> + + <p>Now, for each target system:</p> <pre> Added: trunk/doc/website/pix/slad-ovaldi-results-en.png =================================================================== (Binary files differ) Property changes on: trunk/doc/website/pix/slad-ovaldi-results-en.png ___________________________________________________________________ Name: svn:mime-type + application/octet-stream Added: trunk/doc/website/using-slad-ovaldi.htm4 =================================================================== --- trunk/doc/website/using-slad-ovaldi.htm4 2008-10-24 13:11:55 UTC (rev 1611) +++ trunk/doc/website/using-slad-ovaldi.htm4 2008-10-24 13:28:52 UTC (rev 1612) @@ -0,0 +1,71 @@ +m4_dnl -*-html-*- +m4_include(`template.m4') + +m4_dnl OpenVAS +m4_dnl $Id$ +m4_dnl Description: How to use ovaldi with SLAD +m4_dnl +m4_dnl Authors: +m4_dnl Michael Wiegand <[EMAIL PROTECTED]> +m4_dnl +m4_dnl Copyright: +m4_dnl Copyright (C) 2008 Intevation GmbH +m4_dnl +m4_dnl This program is free software; you can redistribute it and/or modify +m4_dnl it under the terms of the GNU General Public License version 2, +m4_dnl as published by the Free Software Foundation. +m4_dnl +m4_dnl This program is distributed in the hope that it will be useful, +m4_dnl but WITHOUT ANY WARRANTY; without even the implied warranty of +m4_dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +m4_dnl GNU General Public License for more details. +m4_dnl +m4_dnl You should have received a copy of the GNU General Public License +m4_dnl along with this program; if not, write to the Free Software +m4_dnl Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. + + +PAGE_START +<h2>How to use ovaldi with SLAD</h2> + +<p> + Starting with the 2-2.1 release, <a href="http://sourceforge.net/projects/ovaldi/";>ovaldi</a> + support is available in SLAD. This means that SLAD is able to use <a href="http://oval.mitre.org/";>OVAL</a> + definitions to identify security issues on the local systems. The ovaldi + support in SLAD already includes a large number of OVAL definitions and + requires no additional work beyond installing SLAD on the target host. +</p> + +<h3>Instructions</h3> + +<p> + To use ovaldi with SLAD you have to install SLAD on the target system. The + easiest way to do this is to use SLADinstaller; information on installing and + using SLADinstaller is available <a href="using-slad.html">here</a>. +</p> + +<p> + Once you have installed SLAD on the target machine, you can instruct the + remote SLAD to run ovaldi by enabling the "Execute ovaldi for scanning OVAL + described issues" option available in the preferences for the "SLAD run" NVT + in OpenVAS-Client. This option is enabled by default. Execute the scan to + start the SLAD run on the target machine. +</p> + +<p> + After you have started the scan, you can use the NVT "SLAD fetch results" to + retrieve the results of the scan. Be aware that ovaldi usually takes slightly + more time to complete than other plugins, so the ovaldi results might not be + available when you run "SLAD fetch results" for the first time. In this case, + simply wait a moment for ovaldi to finish. You can retrieve the SLAD status + by running additional scans with "SLAD fetch results" enabled. +</p> + +<p> + The results of the ovaldi run will be displayed along with the results of + the other SLAD plugins and other NVTs in OpenVAS-Client. If ovaldi was able to + identify vulnerabilities on the target host, the output will look similar to + this screenshot: +</p> + +<img src="pix/slad-ovaldi-results-en.png" alt="Results of an ovaldi scan using SLAD displayed in OpenVAS-Client"> _______________________________________________ Openvas-commits mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-commits
