Hi,

some time ago I installed OpenVAS according to the documentation from
http://www.openvas.org/install-packages.html on Centos 6.5

Regarding the heartbeat Openssl Bug, I thought it might be a good moment
to check up with OpenVAS again, but I feel a bit lost. :)

May be at some point in the past, the installation was not correct or
whatever.

openvas-setup  Openvas Setup, Version: 0.3 e.g. throws some messages
which are confusing to me:

e.g. thinks like:

[i] Skipping /var/lib/openvas/cert-data/dfn-cert-2008.xml, file is older
than last revision

[i] Skipping CPEs, file is older than last revision

[i] No CVEs updated, skipping CVSS and CVE recount.

[i] No user data directory '/var/lib/openvas/scap-data/private' found.

The nightly run cronjobs also show these lines.


Searching in the web interface I dont see any heartbeat thing installed,
while in the file system it shows up.


ls -l /var/lib/openvas/plugins/2014/gb_openssl_heartbeat_66690.nasl

-rw-r--r--. 1 root root 6587 11. Apr 09:01
/var/lib/openvas/plugins/2014/gb_openssl_heartbeat_66690.nasl

May be I'm doing something wrong at all, or did not configure everything
right .... ?

I downloaded also a more recent check script:

https://svn.wald.intevation.org/svn/openvas/trunk/tools/openvas-check-setup

which says SELINUX should be disabled; we use SELINUX=permissive....

And the check shows

        WARNING: Signature checking of NVTs is not enabled in OpenVAS
Scanner.


How to enable that?


So any suggestion and hint is welcome!

        Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Tel. +49 7141 969 82 420
E-Mail [email protected]

Filmakademie Baden-Württemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: Jürgen Walter MdL
Staatssekretär im Ministerium für Wissenschaft,
Forschung und Kunst Baden-Württemberg

Geschäftsführer: Prof. Thomas Schadt

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to