[Openvas-discuss] SQLite ---- POSTGRESQL Conversion

2015-07-10 Thread Turner,Jonas
Has anyone successfully converted their DB from SQLite to Postgresql by chance? Looking to scan over 15,000+ devices weekly and I just know postgresql would be a better DB to use. Jonas Turner │ Security Analyst II Ph: 419.254.4890│Fax: 419.252.5557 E-mail:

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Michael Wiegand
Hello, I've just committed openvas-check-setup 2.3.1 which should improve the checks for inet6. Can you verify that the services are now detected correctly? Regards, Michael * Ian Samuel [10. Jul 2015]: Hi, FYI, I get the following error when running openvas-check-setup Active Internet

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Ian Samuel
Retreived from: https://scm.wald.intevation.org/svn/openvas/trunk/tools/openvas-check-setup Thanks, the manager is detected properly now. Step 7: Checking if OpenVAS services are up and running ... OK: netstat found, extended checks of the OpenVAS services enabled. OK: OpenVAS

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Reindl Harald
Am 10.07.2015 um 15:38 schrieb W Scott Lockwood III: On 7/10/2015 8:31 AM, Ian Samuel wrote: BTW, I set SELinux as permissive on this machine (instead of disabled): In this mode, SELinux will still cause problems. Best to disable it entirely seriously? by just log and not doing anything

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread W Scott Lockwood III
I'm sorry, but you're just plain wrong. We're done here. On 7/10/2015 9:24 AM, Eero Volotinen wrote: Please, check your facts. Selinux in permissive mode does not block anything. Eero 10.7.2015 5.20 ip. W Scott Lockwood III vladina...@gmail.com mailto:vladina...@gmail.com kirjoitti:

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Eero Volotinen
Please, check your facts. Selinux in permissive mode does not block anything. Eero 10.7.2015 5.20 ip. W Scott Lockwood III vladina...@gmail.com kirjoitti: In fact, this IS true. I've had it screw things up even in permissive mode. I've personally observed this. Situations where the only

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Eero Volotinen
disabling selinux required reboot, logging permissive mode is possible without rebooting. you can use setenforce 0 to temporary disable selinux (permissive mode), but you should make change permanent (in redhat configation file is located in /etc/sysconfig/selinux) Anyway, disabling selinux is

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Reindl Harald
Am 10.07.2015 um 16:39 schrieb Eero Volotinen: disabling selinux required reboot, logging permissive mode is possible without rebooting. you can use setenforce 0 to temporary disable selinux (permissive mode), but you should make change permanent (in redhat configation file is located in

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread W Scott Lockwood III
You would be wrong about that. On 7/10/2015 9:46 AM, Reindl Harald wrote: i bet the guy who pretends permissive mode behaves different than disabled and calling people idiots offlist did not read manpages and rebootet after setenforce not realizing that he did not change the boot

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Eero Volotinen
This is not true, permissive mode only logs events, blocking is only on enforcing mode.. Eero 10.7.2015 4.39 ip. W Scott Lockwood III vladina...@gmail.com kirjoitti: On 7/10/2015 8:31 AM, Ian Samuel wrote: BTW, I set SELinux as permissive on this machine (instead of disabled): In this

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread W Scott Lockwood III
In fact, this IS true. I've had it screw things up even in permissive mode. I've personally observed this. Situations where the only difference between something working and not, was disabling SELinux entirely. On 7/10/2015 9:00 AM, Eero Volotinen wrote: This is not true, permissive mode

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Brandon Perry
Let's keep it civil please. This has gotten off track. On Fri, Jul 10, 2015 at 9:46 AM, Reindl Harald h.rei...@thelounge.net wrote: Am 10.07.2015 um 16:39 schrieb Eero Volotinen: disabling selinux required reboot, logging permissive mode is possible without rebooting. you can use

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread W Scott Lockwood III
On 7/10/2015 8:31 AM, Ian Samuel wrote: BTW, I set SELinux as permissive on this machine (instead of disabled): In this mode, SELinux will still cause problems. Best to disable it entirely. ___ Openvas-discuss mailing list

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Chris
Hi, ./openvas-check-setup: line 789: [: too many arguments seems there is still a minor issue in the openvas-check-setup script. ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Reindl Harald
Am 10.07.2015 um 16:24 schrieb W Scott Lockwood III: I'm sorry, but you're just plain wrong. We're done here. no, he is *not* wrong, RTFM SELinux manpages and *if* disabled/permissive makes a single difference you need to *exactly* specify your envirnoment *and* report a bug - period On

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Reindl Harald
setenforce is *not* meant for permanent configuration http://linux.die.net/man/8/setenforce https://www.centos.org/docs/5/html/5.2/Deployment_Guide/sec-sel-enable-disable-enforcement.html add selinux=0 to your kernel line or just SELINUX=disabled to /etc/selinux/config Am 10.07.2015 um 16:35

Re: [Openvas-discuss] OpenVAS 8 openvas-check-setup

2015-07-10 Thread Ian Samuel
How should I disable SELinux? setenforce doesn't show that as an option: ~]# setenforce usage: setenforce [ Enforcing | Permissive | 1 | 0 ] ~]# getenforce Permissive ~]# setenforce 0 ~]# getenforce Permissive i. On Fri, Jul 10, 2015 at 04:29:20PM +0200, Reindl Harald wrote: Am

Re: [Openvas-discuss] OpenVAS 8.0.3 RPMs

2015-07-10 Thread Reindl Harald
you still did not understand: only find the 8.0.3 RPM for the library is nonsense http://www.openvas.org/install-source.html OpenVAS-8: Libraries 8.0.4 Scanner 5.0.4 Manager 6.0.4 Greenbone Security Assistant (GSA) 6.0.4 Commandline Interface (CLI) 1.4.2 openvas-smb 1.0.1 *nothing* but the

Re: [Openvas-discuss] OpenVAS 8.0.3 RPMs

2015-07-10 Thread Brian Thompson
I've already built 8.0.3 from source. Took a bit of work but it was enough to prove a working capability. To move forward I have to provide RPMs to the CM team. I can't say They are in atomic's repo, I have to give them something they can CM and I'd rather it not be source code. That and our

[Openvas-discuss] TLS version check with oid 103441 and 802067

2015-07-10 Thread Mario Castelao - First Security Technology
Hi all, Do the following plugins also check TLS v1.0? * http://plugins.openvas.org/nasl.php?oid=103441 (Check for supported SSL Ciphers) * http://plugins.openvas.org/nasl.php?oid=802067 (Check for SSL Ciphers) Best regards, Mario smime.p7s Description: S/MIME cryptographic signature

Re: [Openvas-discuss] OpenVAS 8.0.3 RPMs

2015-07-10 Thread Reindl Harald
Am 10.07.2015 um 17:54 schrieb Brian Thompson: Does anyone know where I can get all the OpenVAS 8.0.3 CentOS 7 RPMs? Looking here: http://updates.atomicorp.com/channels/atomic/centos/7/x86_64/RPMS/ I only find the 8.0.3 RPM for the library why don't you just install the atomic release apckage

Re: [Openvas-discuss] OpenVAS 8.0.3 RPMs

2015-07-10 Thread Eero Volotinen
How about using reposync for internal mirror? Eero 10.7.2015 9.44 ip. Brian Thompson bthomp...@wyetechllc.com kirjoitti: I've already built 8.0.3 from source. Took a bit of work but it was enough to prove a working capability. To move forward I have to provide RPMs to the CM team. I can't