Am 29.04.2013 16:00, schrieb Andres Riancho:
> On Mon, Apr 29, 2013 at 6:37 AM, Johannes Weberhofer
> <jweberho...@weberhofer.at>  wrote:
>> >Andres,
>> >
>> >thank you for your notes. Unfortunately I'm my python programming is very
>> >basic, so I think I can't help with many pull-requests...
> This [0] should help with the tcpdump warning, please test and confirm
> it worked.
> [0]https://github.com/andresriancho/w3af/commit/b94fdc0021d3c39b83e3a9990210d40a86a13d27

It works; there is no more warning at application startup.

> Please browse through the w3af-packages repository and try to identify
> if there is a fix for the permissions issue there.

I've just tested to start the graphical interface as non-root user and get the 
following exception; maybe that can help? I think the exception's cause is the 
same as at the console interface.

   w3af version:
     w3af - Web Application Attack and Audit Framework
     Version: 1.5
     Revision: unknown
     Author: Andres Riancho and the w3af team.
Traceback (most recent call last):
   File "/usr/share/w3af/w3af_gui", line 109, in <module>
     err_code = main()
   File "/usr/share/w3af/w3af_gui", line 106, in main
     core.ui.gui.main.main(profile, doupdate)
   File "/usr/share/w3af/core/ui/gui/main.py", line 903, in main
     MainApp(profile, do_upd)
   File "/usr/share/w3af/core/ui/gui/main.py", line 404, in __init__
     self.pcbody = pluginconfig.PluginConfigBody(self, self.w3af)
   File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 620, in __init__
     self.pan = self._buildpan()
   File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 648, in _buildpan
     self.w3af, "output", self.config_panel)
   File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 243, in __init__
     if self._getEditablePlugin(plugin, plugintype):
   File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 300, in 
_getEditablePlugin
     options = plugin.get_options()
   File "/usr/share/w3af/plugins/output/csv_file.py", line 117, in get_options
     o = opt_factory('output_file', self.output_file, d, OUTPUT_FILE)
   File "/usr/share/w3af/core/data/options/opt_factory.py", line 66, in 
opt_factory
     tabid=tabid)
   File "/usr/share/w3af/core/data/options/baseoption.py", line 42, in __init__
     self.set_value(default_value)
   File "/usr/share/w3af/core/data/options/output_file_option.py", line 41, in 
set_value
     self._value = self.validate(value)
   File "/usr/share/w3af/core/data/options/output_file_option.py", line 54, in 
validate
     raise w3afException(msg % value)
w3afException: Invalid file option value "output-w3af.csv", the user doesn't 
have enough permissions to write to the specified directory.
Exception in thread SQLiteExecutor (most likely raised during interpreter 
shutdown)

> Also, I'm wondering about pyc files... what happens when a regular
> user runs w3af and it is installed in a directory where he can't store
> the pyc files? If those files aren't stored, python will have to
> compile the py files to pyc files (in a tmp dir?) each time the
> application is run, which is slow... maybe other RPM packages offer a
> solution to this? I know that setup.py compiles py to pyc when you
> install a module in site-packages. This is an interesting question to
> solve:)

Andres, I run "%py_compile ." and "%py_compile -O ." prior to install the 
application to it's target loaction; so the files are automatically compiled 
for later usage.

Johannes


-- 
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to