Hello NVT developers,
we have had some recent discussion about usage of script_require_keys(),
script_mandatory_keys() and setting "optimize_test".
Current state is:
script_mandatory_keys:
If any of the given keys is missing, the NVT will not be launched.
(AND operator)
script_require_keys:
If any of the given keys is missing, the NVT will not be launched IF
the setting "optimize_test" is "yes".
In case "optimize_test" is "no", the NVTs will be launched.
So, this is also an AND operation in the case of optimize_test="yes".
In other words, script_required_keys behaves identical to
script_mandatory_keys if "optimize_test" is "yes".
It seems that several NVTs do assume script_required_keys to
act as "OR" operation. Example: gb_mozilla_prdts_mult_vuln_sep11_win.nasl
where
script_require_keys("Firefox/Win/Ver","Seamonkey/Win/Ver","Thunderbird/Win/Ver");
It is not started if either of these is missing.
It seems that it is desirable for NVT developers to have an OR operation
available to write certain types of NVTs where a either/or situation is treated.
It appears that only very few NVTs are assuming AND operator. So perhaps
it might make sense to change those NVTs and change the Scanner behaviour to
what is assumed for case of optimize_test=yes.
This would make mandatory_keys and require_keys behave more differently and thus
open more ways of specifying efficient dependencies.
Note: I did not yet do a careful count of NVTs assuming AND. In case we would
opt for this change, we should count first to see wether it is really only
a small number.
I am interested in your opinion how to improve the situation best.
All the best
Jan
--
Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-plugins mailing list
[email protected]
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins
