Thomas,
On Friday 20 November 2009 17:23:26 Thomas Reinke wrote:
> > What exactly is the harm done by toolcheck and mandatory_keys?
>
> Ok...scenario -- I run 20 reports a day. Each report says
> "You are missing ovaldi and nikto". I get it. I'm missing
> those two. So I turn off the "Perform tool check".
> Those annoying messages go away. Great. But now, despite the
> fact that I have nmap on my system, all nmap functionality
> has gone away as well, despite it being available.
You are right! I forgot about this option, I have it always active.
> Solution #1:
> Change the preference to "Disable use of 3rd party tools
> such as nmap" or some such thing to avoid misunderstanding
> what the setting is. Because that's what it is doing right now.
> And that's the misunderstanding I had.
>
> Solution #2:
> As per your comment that it is not advisory, change toolcheck.nasl
> to ALWAYS run, and provide users with a way of disabling the
> reporting from toolcheck.nasl if they already are perfectly aware
> of what tools they have installed on their scanner and don't want
> to see those messages.
>
> Personally, I like the second solution better. I don't see a
> reason for the preference setting as it is currenty is - I don't
> know of a good reason to NOT run toolcheck.nasl, but I can see
> good reasons to suppress the reporting that toolcheck.nasl does.
Fully agreed from my side. We should get rid of that option.
I guess it is a remains of the very first version where we did
not want to disturb people with the new toolcheck.
Today it seems is has proven and even must be there
to have correct and efficient scans.
Any argument to raise why we should not have toolcheck always
be executed?
Note for NASL writers, that it is a good idea to set toolcheck.nasl
as a dependency in case script_mandatory_keys uses results of it.
However, it is still possible to configure scans in a way that
toolcheck is not executed and thus the problem occurs which
Thomas described.
Best
Jan
--
Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück
AG Osnabrück, HR B 202460 | Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver
Wagner
_______________________________________________
Openvas-devel mailing list
Openvas-devel@wald.intevation.org
http://lists.wald.intevation.org/mailman/listinfo/openvas-devel
