Date: Sun, 22 May 2022 05:44:26 GMT From: Jose Alonso Cardenas Marquez <acm@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: fc6905611301 - main - security/gvm: update to 21.4.4 Message-ID: <202205220544.24M5iQqK005474@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by acm: URL: https://cgit.FreeBSD.org/ports/commit/?id=fc690561130132cfbec20ad3865cf0af7f717ca0 commit fc690561130132cfbec20ad3865cf0af7f717ca0 Author: Jose Alonso Cardenas Marquez <acm@FreeBSD.org> AuthorDate: 2022-05-22 05:25:38 +0000 Commit: Jose Alonso Cardenas Marquez <acm@FreeBSD.org> CommitDate: 2022-05-22 05:42:11 +0000 security/gvm: update to 21.4.4 - security/openvas update to 21.4.4 - security/gvmd update to 21.4.5 - security/gvm-libs update to 21.4.4 - security/py-ospd-openvas update to 21.4.4 - security/py-python-gvm update to 21.11.0 - security/gsad was added - security/gsa was added - security/py-ospd was removed. Now it is part of security/py-osdp-openvas port - security/greenbone-security-assistant was removed. gsad and gsa ports was added instead of it --- security/gvm/Makefile | 5 +++-- security/gvm/files/pkg-message.in | 28 ++++++++++++++++++---------- 2 files changed, 21 insertions(+), 12 deletions(-) diff --git a/security/gvm/Makefile b/security/gvm/Makefile index 1eee1478469f..3a78a7032912 100644 --- a/security/gvm/Makefile +++ b/security/gvm/Makefile @@ -1,5 +1,5 @@ PORTNAME= gvm -PORTVERSION= 21.4.3 +PORTVERSION= 21.4.4 CATEGORIES= security MAINTAINER= acm@FreeBSD.org @@ -20,7 +20,8 @@ RUN_DEPENDS+= ${LOCALBASE}/bin/ospd-openvas:security/py-ospd-openvas@${PY_FLAVOR RUN_DEPENDS+= ${LOCALBASE}/sbin/openvas:security/openvas # Install GVM Web Interface -RUN_DEPENDS+= ${LOCALBASE}/sbin/gsad:security/greenbone-security-assistant +RUN_DEPENDS+= ${LOCALBASE}/sbin/gsad:security/gsad +RUN_DEPENDS+= ${LOCALBASE}/share/gvm/gsad/web/index.html:security/gsa SUB_FILES= pkg-message diff --git a/security/gvm/files/pkg-message.in b/security/gvm/files/pkg-message.in index e01bd8dfdaf6..fb6fed9cc012 100644 --- a/security/gvm/files/pkg-message.in +++ b/security/gvm/files/pkg-message.in @@ -38,7 +38,11 @@ Basic instructions for configure your gvm infraestruture are following: # sysrc ospd_openvas_enable="YES" # sysrc gsad_enable="YES" -5) Currently, ospd_openvas should run as a user without elevated privileges +5) Start redis service + + # service redis start + +6) Currently, ospd_openvas should run as a user without elevated privileges (gvm) and use sudo for run openvas scanner but it does not work properly. Like a workaround you must run redis as root and the same with ospd_openvas. @@ -48,9 +52,13 @@ Basic instructions for configure your gvm infraestruture are following: ospd_openvas_user="root" Take in mind it is not the best configuration for run ospd_openvas and - openvas. + openvas. + + The following could avoid some scan issues with openvas + + # echo "test_alive_hosts_only = no" >> /usr/local/etc/openvas/openvas.conf -6) The following steps are neccessary before of you can access to GVM web +7) The following steps are neccessary before of you can access to GVM web interface (gsad): Start gvmd service. It will listen on /var/run/gvmd/gvmd.sock by default @@ -80,7 +88,7 @@ Basic instructions for configure your gvm infraestruture are following: # su -m gvm -c "gvmd --modify-setting 78eceaec-3385-11ea-b237-28d24461215b --value <uuid_of_user> -7) Start OSPD-OpenVAS Wrapper service. It will listen on /var/run/ospd/ospd.sock by default +8) Start OSPD-OpenVAS Wrapper service. It will listen on /var/run/ospd/ospd.sock by default # service ospd_openvas start @@ -93,11 +101,11 @@ Basic instructions for configure your gvm infraestruture are following: # su -m gvm -c "gvmd --verify-scanner=08b69003-5fc2-4037-a479-93b440211c73" Scanner version: OpenVAS x.x.x -8) Start GVM web interface. It will listen on http://127.0.0.1 by default +9) Start GVM web interface. It will listen on http://127.0.0.1 by default # service gsad start -9) Some openvas scanner tasks need access to /dev/bpf device. Add the +10) Some openvas scanner tasks need access to /dev/bpf device. Add the following lines to /etc/devfs.conf own bpf root:gvm @@ -107,15 +115,15 @@ Basic instructions for configure your gvm infraestruture are following: # service devfs restart -10) gvm log files are stores to /var/log/gvm directory +11) gvm log files are stores to /var/log/gvm directory -11) gsad can export results to PDF. It needs print/texlive-texmf port +12) gsad can export results to PDF. It needs print/texlive-texmf port # pkg install texlive-texmf It will install 1G of data -12) If you need more configure information you can look at the following links: +13) If you need more configure information you can look at the following links: https://github.com/greenbone/gvmd/blob/master/INSTALL.md https://github.com/greenbone/openvas/blob/master/INSTALL.md @@ -129,7 +137,7 @@ Basic instructions for configure your gvm infraestruture are following: # ospd-openvas -h # gsad -h -13) Enjoy it +14) Enjoy it EOM } ]
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202205220544.24M5iQqK005474>