Hello Felix, > -----Original Message----- > From: openvas-devel-boun...@wald.intevation.org > [mailto:openvas-devel-boun...@wald.intevation.org] On Behalf > Of Felix Wolfsteller > Sent: Friday, February 26, 2010 4:49 PM > To: openvas-devel@wald.intevation.org > Subject: Re: [Openvas-devel] CR #44 - Integrating NMAP NSE's > into OpenVAS > > Also, for the future there should be a mechanism to influence > certain other "nse-nvt" parameters like category. > > As some nse seem to be intrusive, they should not be executed > when "safe checks" is on, right?
Yes, I mention about preferences in CR. As of now there is one or very few that need such inputs as "--script-args". But they run with default value set to to "safe". As we go, may be we need to take care of it through NASL preferences. There's no standard way of listing these args inside NSE's. There may be an exercise required to be carried out before adding NSE into NVT feed. > > Also, which severity would the reported issues/nse output have? All going to be reported as security_note() as we can't distinguish the NMAP output clearly. > > -- felix > Thanks, Chandra. > On Thursday 25 February 2010 15:06:39 Chandrashekhar B wrote: > > Hello, > > > > I have added a new CR to allow NSE scripts from NMAP to be launched > > through OpenVAS. > > > > #44 - Integrating NMAP NSE's into OpenVAS > > http://www.openvas.org/openvas-cr-44.html > > > > Please review and let me know if there are any concerns, > comments or > > suggestions. > > > > Thanks, > > Chandra. > > > > _______________________________________________ > > Openvas-devel mailing list > > Openvas-devel@wald.intevation.org > > http://lists.wald.intevation.org/mailman/listinfo/openvas-devel > > > -- > Felix Wolfsteller | ++49 541 335083-783 | > http://www.intevation.de/ PGP Key: 39DE0100 Intevation GmbH, > Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998 > Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. > Jan-Oliver Wagner _______________________________________________ > Openvas-devel mailing list > Openvas-devel@wald.intevation.org > http://lists.wald.intevation.org/mailman/listinfo/openvas-devel _______________________________________________ Openvas-devel mailing list Openvas-devel@wald.intevation.org http://lists.wald.intevation.org/mailman/listinfo/openvas-devel
