Re: [Openvas-discuss] Summary of ideas for future OpenVAS functionalities
On Thursday 24 May 2007 22:13, Javier Fernández-Sanguino Peña wrote: On Thu, May 24, 2007 at 09:39:37PM +0200, Jan-Oliver Wagner wrote: However, I don't have any CVS access to nessus-core anymore. Anonymous access has been already switched off some time before that. Well, I still have my local CVS copy. great :-) So, I am afraid there it is not really easy to simply retrieve the code. The tar-ball releases of Nessus-2 are only snapshots of HEAD. Also the OpenVAS modules did take a snapshot of HEAD and not of any branches. Attached is a diff I've just made of NESSUS_SQL vs. the 2.2.5 release. I think the database integration was not tested with this release. Of the top of my head, I think I did test the code in 2.2.3 and worked with MySQL. There are some known issues with the code, however, see the TODO. good. Perhaps Oliver may take a closer look at it. Best Jan -- Dr. Jan-Oliver WagnerIntevation GmbH, Osnabrück Amtsgericht Osnabrück, HR B 18998 http://www.intevation.de/ Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] (no subject)
On Friday 18 May 2007 09:25, Renaud Deraison (lists) wrote: I have been contacted by Tenable. They are pretty sure some plugins in openvas-plugins module are present that should not be there due to never being GPL licensed. Basically it should at least be anything that matches grep -i script_copyright.*Tenable.* scripts/* Just a clarification : I was referring to the list of plugins seen in the email than Jan sent to openvas-devel : http://lists.wald.intevation.org/pipermail/openvas-devel/2007-May/000315.html Whereby some plugins such as the Veritas Netbackup plugins have never been released in the GPL feed and whose release post-dates our license announcement nearly by a full year. not sure whether there is a misunderstanding here: The list I posted named proprietary plugins we are missing to reactivate GPL plugins. So it is even absolutely correct the veritas*.nasl appear on this list. In other words, none of the listed plugins is present in openvas-plugins/scripts. Including any veritas*.nasl which I just double-checked to make sure my analysis script is not buggy ;-) Best Jan -- Dr. Jan-Oliver WagnerIntevation GmbH, Osnabrück Amtsgericht Osnabrück, HR B 18998 http://www.intevation.de/ Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
Re: [Openvas-discuss] (no subject)
On May 25, 20 not sure whether there is a misunderstanding here: The list I posted named proprietary plugins we are missing to reactivate GPL plugins. So it is even absolutely correct the veritas*.nasl appear on this list. My mistake then :) Note that contrarily to what is said there, a missing dependency does not deactivate a plugin -- the plugin will run nevertheless, but there will be less info in the KB. While in some cases it means the plugin will not run (ie: if it depends on a specific KB item), in most cases it will run fine. For instance, the absence of the httpver.nasl plugin does not deactivate all the http-related plugins, they'll just assume that the remote web server is at least speaking HTTP/1.0. -- Renaud ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
