Re: [Openvas-discuss] Produce OVAL System Characteristics
Hi,
Yes, the ifconfig part which is omitted by now ;-)
I think the more appropriate behaviour for the package list is just to
ignore the distro and dump all rpm/dpkg data we have. It never hurts,
right? And would work for other dpkg/rpm based distributions with no
modification.
I think we need a script to collect Windows "Uninstall" registry data as
well. Will experiment with that a bit.
On Thu, Dec 07, 2017 at 05:06:23PM +0100, Christian Fischer wrote:
> Hi,
>
> On 16.11.2017 20:51, ArkanoiD wrote:
> > There are more bugs, yet this one is most significant. Took whole evening
> > for me to pin it down.
>
> i wouldn't call no support for other distributions then Debian and Red
> Hat "a bug". This code probably was just tested against those two
> distros back then in 2012 when it was implemented.
>
> Testing with other Non-Red Hat/Debian based distros is more then welcome
> by e.g. replacing:
>
> if( "DEB" >< release ) {
>
> with
>
> if( "DEB" >< release || "UBUNTU" >< release ) {
>
> in kb_2_sc.nasl.
>
> Nevertheless the above point i have also updated the kb_2_sc.nasl to
> fill in the system info and network interfaces when running such
> currently unsupported distros.
>
> If there is anything else missing / wrong in kb_2_sc.nasl feel free to
> post a follow-up with suggestions and / or patches.
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Produce OVAL System Characteristics
Hi,
On 16.11.2017 20:51, ArkanoiD wrote:
> There are more bugs, yet this one is most significant. Took whole evening
> for me to pin it down.
i wouldn't call no support for other distributions then Debian and Red
Hat "a bug". This code probably was just tested against those two
distros back then in 2012 when it was implemented.
Testing with other Non-Red Hat/Debian based distros is more then welcome
by e.g. replacing:
if( "DEB" >< release ) {
with
if( "DEB" >< release || "UBUNTU" >< release ) {
in kb_2_sc.nasl.
Nevertheless the above point i have also updated the kb_2_sc.nasl to
fill in the system info and network interfaces when running such
currently unsupported distros.
If there is anything else missing / wrong in kb_2_sc.nasl feel free to
post a follow-up with suggestions and / or patches.
Regards,
--
Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
Greenbone Networks GmbH | http://greenbone.net
Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Produce OVAL System Characteristics
Aaand, seems that I identified the root cause!
from kb_2_sc.nasl:
release = get_kb_item ("ssh/login/release");
if ("RH" >< release)
{
..
}
if ("DEB" >< release)
{
..
}
If your system is neither of those (yes, CentOS/Fedora/Ubuntu are not), the
report is to be empty.
There are more bugs, yet this one is most significant. Took whole evening
for me to pin it down.
On Mon, Sep 11, 2017 at 2:07 PM, wrote:
> Yes I did it but when i open "Show System Characteristic" in the result
> page i get only a OVAL SC file with all empty elements.
>
> I did an authenticated scan as root.
>
> In the NVT named "Create System Characteristics" is written that the
> System Characteristic element is stored in the Knowledge Base.
>
> Instead in the NVT named "Show System Characteristic" is written that it
> shows OVAL SC if they are available in the Knowledge Base.
>
> What could be the problem?
>
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Produce OVAL System Characteristics
Yes I did it but when i open "Show System Characteristic" in the result page i get only a OVAL SC file with all empty elements. I did an authenticated scan as root. In the NVT named "Create System Characteristics" is written that the System Characteristic element is stored in the Knowledge Base. Instead in the NVT named "Show System Characteristic" is written that it shows OVAL SC if they are available in the Knowledge Base. What could be the problem?___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] Produce OVAL System Characteristics
Hi, On 09.09.2017 17:39, dabrunzofeder...@libero.it wrote: > Hi, > > I read on the OVAL website that OpenVAS is a "System Characteristics > Producer" but I can not figure out how to make a SC file using OpenVAS. > > can someone help me? the documentation available at the following link should help you on this topic: http://docs.greenbone.net/GSM-Manual/gos-4/en/compliance.html#oval-system-characteristics > Thanks Regards, -- Christian Fischer | PGP Key: 0x54F3CE5B76C597AD Greenbone Networks GmbH | http://greenbone.net Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
