Johanes,
On Mon, Apr 29, 2013 at 12:05 PM, Johannes Weberhofer
<jweberho...@weberhofer.at> wrote:
>
>
> Am 29.04.2013 16:00, schrieb Andres Riancho:
>
>> On Mon, Apr 29, 2013 at 6:37 AM, Johannes Weberhofer
>> <jweberho...@weberhofer.at> wrote:
>>>
>>> >Andres,
>>> >
>>> >thank you for your notes. Unfortunately I'm my python programming is
>>> > very
>>> >basic, so I think I can't help with many pull-requests...
>>
>> This [0] should help with the tcpdump warning, please test and confirm
>> it worked.
>>
>> [0]https://github.com/andresriancho/w3af/commit/b94fdc0021d3c39b83e3a9990210d40a86a13d27
>
>
> It works; there is no more warning at application startup.
w00t! Python magic!
>
>> Please browse through the w3af-packages repository and try to identify
>> if there is a fix for the permissions issue there.
>
>
> I've just tested to start the graphical interface as non-root user and get
> the following exception; maybe that can help? I think the exception's cause
> is the same as at the console interface.
>
> w3af version:
> w3af - Web Application Attack and Audit Framework
> Version: 1.5
> Revision: unknown
> Author: Andres Riancho and the w3af team.
> Traceback (most recent call last):
> File "/usr/share/w3af/w3af_gui", line 109, in <module>
> err_code = main()
> File "/usr/share/w3af/w3af_gui", line 106, in main
> core.ui.gui.main.main(profile, doupdate)
> File "/usr/share/w3af/core/ui/gui/main.py", line 903, in main
> MainApp(profile, do_upd)
> File "/usr/share/w3af/core/ui/gui/main.py", line 404, in __init__
> self.pcbody = pluginconfig.PluginConfigBody(self, self.w3af)
> File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 620, in __init__
> self.pan = self._buildpan()
> File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 648, in _buildpan
> self.w3af, "output", self.config_panel)
> File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 243, in __init__
> if self._getEditablePlugin(plugin, plugintype):
> File "/usr/share/w3af/core/ui/gui/pluginconfig.py", line 300, in
> _getEditablePlugin
> options = plugin.get_options()
> File "/usr/share/w3af/plugins/output/csv_file.py", line 117, in
> get_options
> o = opt_factory('output_file', self.output_file, d, OUTPUT_FILE)
> File "/usr/share/w3af/core/data/options/opt_factory.py", line 66, in
> opt_factory
> tabid=tabid)
> File "/usr/share/w3af/core/data/options/baseoption.py", line 42, in
> __init__
> self.set_value(default_value)
> File "/usr/share/w3af/core/data/options/output_file_option.py", line 41,
> in set_value
> self._value = self.validate(value)
> File "/usr/share/w3af/core/data/options/output_file_option.py", line 54,
> in validate
> raise w3afException(msg % value)
> w3afException: Invalid file option value "output-w3af.csv", the user doesn't
> have enough permissions to write to the specified directory.
> Exception in thread SQLiteExecutor (most likely raised during interpreter
> shutdown)
Yes, it's the same bug as the one you're finding in the console,
created [0] for this. Will try to fix it today,
[0] https://github.com/andresriancho/w3af/issues/294
>
>> Also, I'm wondering about pyc files... what happens when a regular
>> user runs w3af and it is installed in a directory where he can't store
>> the pyc files? If those files aren't stored, python will have to
>> compile the py files to pyc files (in a tmp dir?) each time the
>> application is run, which is slow... maybe other RPM packages offer a
>> solution to this? I know that setup.py compiles py to pyc when you
>> install a module in site-packages. This is an interesting question to
>> solve:)
>
>
> Andres, I run "%py_compile ." and "%py_compile -O ." prior to install the
> application to it's target loaction; so the files are automatically compiled
> for later usage.
Oh! I was unaware of that command. Nice. In my ubuntu it is called
py_compilefiles and doesn't seem to have the -O param, any idea on the
differences?
>
> Johannes
>
>
> --
> Johannes Weberhofer
> Weberhofer GmbH, Austria, Vienna
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3
------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
