API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 22nd, 2018
190
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 35.61 KB | None | 0 0
raw download clone embed print report
  1. #!/bin/sh
  2.  
  3. # OpenVAS
  4. # $Id$
  5. # Description: Script for checking completeness and readiness
  6. # of OpenVAS.
  7. #
  8. # Authors:
  9. # Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net>
  10. # Michael Wiegand <michael.wiegand@greenbone.net>
  11. #
  12. # Copyright:
  13. # Copyright (C) 2011-2015 Greenbone Networks GmbH
  14. #
  15. # This program is free software; you can redistribute it and/or modify
  16. # it under the terms of the GNU General Public License version 2,
  17. # or at your option any later version, as published by the
  18. # Free Software Foundation
  19. #
  20. # This program is distributed in the hope that it will be useful,
  21. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  22. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  23. # GNU General Public License for more details.
  24. #
  25. # You should have received a copy of the GNU General Public License
  26. # along with this program; if not, write to the Free Software
  27. # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  28.  
  29. LOG=/tmp/openvas-check-setup.log
  30. CHECKVERSION=2.3.3
  31.  
  32. if [ "$1" = "--server" -o "$2" = "--server" ]
  33. then
  34. MODE="server"
  35. else
  36. MODE="desktop"
  37. fi
  38.  
  39. # Current default is OpenVAS-8:
  40. VER="8"
  41. SCANNER_MAJOR="5"
  42. SCANNER_MINOR="0"
  43. MANAGER_MAJOR="6"
  44. MANAGER_MINOR="0"
  45. ADMINISTRATOR_MAJOR="0"
  46. ADMINISTRATOR_MINOR="0"
  47. GSA_MAJOR="6"
  48. GSA_MINOR="0"
  49. CLI_MAJOR="1"
  50. CLI_MINOR="4"
  51.  
  52. if [ "$1" = "--v9" -o "$2" = "--v9" ]
  53. then
  54. VER="9"
  55. SCANNER_MAJOR="5"
  56. SCANNER_MINOR="1"
  57. MANAGER_MAJOR="6"
  58. MANAGER_MINOR="1"
  59. ADMINISTRATOR_MAJOR="0"
  60. ADMINISTRATOR_MINOR="0"
  61. GSA_MAJOR="6"
  62. GSA_MINOR="1"
  63. CLI_MAJOR="1"
  64. CLI_MINOR="4"
  65. elif [ "$1" = "--v8" -o "$2" = "--v8" ]
  66. then
  67. VER="8"
  68. SCANNER_MAJOR="5"
  69. SCANNER_MINOR="0"
  70. MANAGER_MAJOR="6"
  71. MANAGER_MINOR="0"
  72. ADMINISTRATOR_MAJOR="0"
  73. ADMINISTRATOR_MINOR="0"
  74. GSA_MAJOR="6"
  75. GSA_MINOR="0"
  76. CLI_MAJOR="1"
  77. CLI_MINOR="4"
  78. elif [ "$1" = "--v7" -o "$2" = "--v7" ]
  79. then
  80. VER="7"
  81. SCANNER_MAJOR="4"
  82. SCANNER_MINOR="0"
  83. MANAGER_MAJOR="5"
  84. MANAGER_MINOR="0"
  85. ADMINISTRATOR_MAJOR="0"
  86. ADMINISTRATOR_MINOR="0"
  87. GSA_MAJOR="5"
  88. GSA_MINOR="0"
  89. CLI_MAJOR="1"
  90. CLI_MINOR="3"
  91. elif [ "$1" = "--v6" -o "$2" = "--v6" ]
  92. then
  93. VER="6"
  94. SCANNER_MAJOR="3"
  95. SCANNER_MINOR="4"
  96. MANAGER_MAJOR="4"
  97. MANAGER_MINOR="0"
  98. ADMINISTRATOR_MAJOR="1"
  99. ADMINISTRATOR_MINOR="3"
  100. GSA_MAJOR="4"
  101. GSA_MINOR="0"
  102. CLI_MAJOR="1"
  103. CLI_MINOR="2"
  104. GSD_MAJOR="1"
  105. GSD_MINOR="2"
  106. fi
  107.  
  108. echo "openvas-check-setup $CHECKVERSION"
  109. echo " Test completeness and readiness of OpenVAS-$VER"
  110. if [ "$VER" = "8" ]
  111. then
  112. echo " (add '--v6' or '--v7' or '--v9'"
  113. echo " if you want to check for another OpenVAS version)"
  114. fi
  115. echo ""
  116. echo " Please report us any non-detected problems and"
  117. echo " help us to improve this check routine:"
  118. echo " http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss"
  119. echo ""
  120. echo " Send us the log-file ($LOG) to help analyze the problem."
  121. echo ""
  122.  
  123. if [ "$MODE" = "desktop" ]
  124. then
  125. echo " Use the parameter --server to skip checks for client tools"
  126. echo " like GSD and OpenVAS-CLI."
  127. echo ""
  128. fi
  129.  
  130. log_and_print ()
  131. {
  132. echo " " $1
  133. echo " " $1 >> $LOG
  134. }
  135.  
  136. check_failed ()
  137. {
  138. echo ""
  139. echo " ERROR: Your OpenVAS-$VER installation is not yet complete!"
  140. echo ""
  141. echo "Please follow the instructions marked with FIX above and run this"
  142. echo "script again."
  143. echo ""
  144. echo "If you think this result is wrong, please report your observation"
  145. echo "and help us to improve this check routine:"
  146. echo "http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss"
  147. echo "Please attach the log-file ($LOG) to help us analyze the problem."
  148. echo ""
  149. exit 1
  150. }
  151.  
  152. # Specific to kali
  153. print_openvas_mkcert_client ()
  154. {
  155. if [ $VER -ge 9 ]
  156. then
  157. log_and_print "FIX: Run 'openvas-manage-certs -a'"
  158. elif [ $VER -ge 7 ]
  159. then
  160. log_and_print "FIX: Run 'openvas-mkcert-client -n -i'"
  161. else
  162. log_and_print "FIX: Run 'openvas-mkcert-client -n om -i'"
  163. fi
  164. }
  165.  
  166.  
  167. # LOG start
  168. echo "openvas-check-setup $CHECKVERSION" > $LOG
  169. echo " Mode: $MODE" >> $LOG
  170. echo " Date: " `date -R` >> $LOG
  171. echo "" >> $LOG
  172.  
  173.  
  174. echo "Step 1: Checking OpenVAS Scanner ... "
  175.  
  176. echo "Checking for old OpenVAS Scanner <= 2.0 ..." >> $LOG
  177. openvasd -V >> $LOG 2>&1
  178. if [ $? -eq 0 ]
  179. then
  180. log_and_print "ERROR: Old version of OpenVAS Scanner detected."
  181. log_and_print "FIX: Please remove the installation of the old OpenVAS Scanner (openvasd)."
  182. check_failed
  183. fi
  184. echo "" >> $LOG
  185.  
  186. echo "Checking presence of OpenVAS Scanner ..." >> $LOG
  187. openvassd --version >> $LOG 2>&1
  188. if [ $? -ne 0 ]
  189. then
  190. log_and_print "ERROR: No OpenVAS Scanner (openvassd) found."
  191. log_and_print "FIX: Please install OpenVAS Scanner."
  192. check_failed
  193. fi
  194. echo "" >> $LOG
  195.  
  196. echo "Checking OpenVAS Scanner version ..." >> $LOG
  197.  
  198. VERSION=`openvassd --version 2>>$LOG | head -1 | sed -e "s/OpenVAS Scanner //"`
  199.  
  200. if [ `echo $VERSION | grep "^$SCANNER_MAJOR\.$SCANNER_MINOR" | wc -l` -ne "1" ]
  201. then
  202. log_and_print "ERROR: OpenVAS Scanner too old or too new: $VERSION"
  203. log_and_print "FIX: Please install OpenVAS Scanner $SCANNER_MAJOR.$SCANNER_MINOR."
  204. check_failed
  205. fi
  206. echo "" >> $LOG
  207.  
  208. log_and_print "OK: OpenVAS Scanner is present in version $VERSION."
  209.  
  210. openvassd -s >> $LOG 2>&1
  211.  
  212. echo "Checking OpenVAS Scanner CA cert ..." >> $LOG
  213. CAFILE=`openvassd -s 2>>$LOG | grep ca_file | sed -e "s/^ca_file = //"`
  214. if [ ! -e $CAFILE ]
  215. then
  216. log_and_print "ERROR: No CA certificate file of OpenVAS Scanner found."
  217. if [ "$VER" -ge 9 ]
  218. then
  219. log_and_print "FIX: Run 'openvas-manage-certs -a'."
  220. else
  221. log_and_print "FIX: Run 'openvas-mkcert'."
  222. fi
  223. check_failed
  224. fi
  225. echo "" >> $LOG
  226.  
  227. log_and_print "OK: OpenVAS Scanner CA Certificate is present as $CAFILE."
  228.  
  229. # Specific to kali
  230. echo "Checking OpenVAS Manager server certificate ..." >> $LOG
  231. CERTDIR=`dirname $CAFILE`
  232. SERVERCERTFILE="$CERTDIR/servercert.pem"
  233. if [ ! -e $SERVERCERTFILE ]
  234. then
  235. log_and_print "ERROR: No server certificate file of OpenVAS Scanner found."
  236. log_and_print "FIX: Run 'openvas-mkcert -f -q'."
  237. check_failed
  238. else
  239. if openssl verify -CAfile $CERTDIR/cacert.pem $SERVERCERTFILE |grep -q ^error
  240. then
  241. log_and_print "ERROR: the server certificate file of OpenVAS Scanner is not valid."
  242. log_and_print "FIX: Run 'openvas-mkcert -f -q'."
  243. check_failed
  244. else
  245. log_and_print "OK: OpenVAS Scanner server certificate is valid and present as $SERVERCERTFILE."
  246. fi
  247. fi
  248. echo "" >> $LOG
  249.  
  250. if [ "$VER" -ge 8 ]
  251. then
  252. echo "Checking presence of redis ..." >> $LOG
  253. BINARY=`redis-server --version`
  254.  
  255. if [ $? -ne 0 ]
  256. then
  257. log_and_print "ERROR: No redis-server installation found."
  258. log_and_print "FIX: You should install redis-server for improved scalability and ability to trace/debug the KB"
  259. check_failed
  260. else
  261. VERSION=`redis-server --version | awk '{ print $4 }'`
  262. if [ `echo $VERSION | grep sha` ]
  263. then
  264. VERSION=`redis-server --version | awk '{ print $3 }'`
  265. fi
  266. log_and_print "OK: redis-server is present in version $VERSION."
  267. HAVE_REDIS=1
  268. fi
  269. echo "" >> $LOG
  270.  
  271. if [ $HAVE_REDIS -eq 1 ]
  272. then
  273. echo "Checking if redis-server is configured properly to run with openVAS ..." >> $LOG
  274. REDISSOCKET=`openvassd -s 2>>$LOG | grep kb_location | sed -e "s/^kb_location = //"`
  275. if [ -z "$REDISSOCKET" ]
  276. then
  277. log_and_print "ERROR: scanner is not configured to use a redis-server socket."
  278. log_and_print "FIX: Configure the kb_location setting of the scanner to the path of the redis-server socket."
  279. check_failed
  280. else
  281. log_and_print "OK: scanner (kb_location setting) is configured properly using the redis-server socket: $REDISSOCKET"
  282. echo "Checking if redis-server is running ..." >> $LOG
  283. if [ -e $REDISSOCKET ]
  284. then
  285. log_and_print "OK: redis-server is running and listening on socket: $REDISSOCKET."
  286. else
  287. log_and_print "ERROR: redis-server is not running or not listening on socket: $REDISSOCKET"
  288. log_and_print "FIX: You should start the redis-server or configure it to listen on socket: $REDISSOCKET"
  289. check_failed
  290. fi
  291. fi
  292. log_and_print "OK: redis-server configuration is OK and redis-server is running."
  293. fi
  294.  
  295. echo "" >> $LOG
  296. fi
  297.  
  298. echo "Checking NVT collection ..." >> $LOG
  299. PLUGINSFOLDER=`openvassd -s 2>>$LOG | grep plugins_folder | sed -e "s/^plugins_folder = //"`
  300. if [ ! -d $PLUGINSFOLDER ]
  301. then
  302. log_and_print "ERROR: Directory containing the NVT collection not found."
  303. log_and_print "FIX: Run a NVT synchronization script like openvas-nvt-sync or greenbone-nvt-sync."
  304. check_failed
  305. fi
  306. OLDPLUGINSFOLDER=`echo "$PLUGINSFOLDER" | grep -q -v "/var/" 2>&1`
  307. if [ $? -eq 0 ]
  308. then
  309. CONFFILE=`openvassd -s 2>>$LOG | grep config_file | sed -e "s/^config_file = //"`
  310. log_and_print "ERROR: Your OpenVAS Scanner configuration seems to be from a pre-OpenVAS-4 installation and contains non-FHS compliant paths."
  311. log_and_print "FIX: Delete your OpenVAS Scanner Configuration file ($CONFFILE)."
  312. check_failed
  313. fi
  314. NVTCOUNT=`find $PLUGINSFOLDER -name "*nasl" | wc -l`
  315. if [ $NVTCOUNT -lt 10 ]
  316. then
  317. log_and_print "ERROR: The NVT collection is very small."
  318. log_and_print "FIX: Run a synchronization script like openvas-nvt-sync or greenbone-nvt-sync."
  319. check_failed
  320. fi
  321. echo "" >> $LOG
  322.  
  323. log_and_print "OK: NVT collection in $PLUGINSFOLDER contains $NVTCOUNT NVTs."
  324.  
  325. echo "Checking status of signature checking in OpenVAS Scanner ..." >> $LOG
  326. NOSIGCHECK=`openvassd -s 2>>$LOG | grep nasl_no_signature_check | sed -e "s/^nasl_no_signature_check = //"`
  327. if [ $NOSIGCHECK != "no" ]
  328. then
  329. log_and_print "WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner."
  330. log_and_print "SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html)."
  331. else
  332. log_and_print "OK: Signature checking of NVTs is enabled in OpenVAS Scanner."
  333. fi
  334. echo "" >> $LOG
  335.  
  336. CACHEFOLDER=`openvassd -s 2>>$LOG | grep cache_folder | sed -e "s/^cache_folder = //"`
  337. CACHECOUNT=`find $CACHEFOLDER -name "*nvti" | wc -l`
  338. if [ $CACHECOUNT -lt $NVTCOUNT ]
  339. then
  340. log_and_print "WARNING: The initial NVT cache has not yet been generated."
  341. log_and_print "SUGGEST: Start OpenVAS Scanner for the first time to generate the cache."
  342. else
  343. log_and_print "OK: The NVT cache in $CACHEFOLDER contains $CACHECOUNT files for $NVTCOUNT NVTs."
  344. fi
  345. echo "" >> $LOG
  346.  
  347. echo "Step 2: Checking OpenVAS Manager ... "
  348.  
  349. echo "Checking presence of OpenVAS Manager ..." >> $LOG
  350. openvasmd --version >> $LOG 2>&1
  351. if [ $? -ne 0 ]
  352. then
  353. log_and_print "ERROR: No OpenVAS Manager (openvasmd) found."
  354. log_and_print "FIX: Please install OpenVAS Manager."
  355. check_failed
  356. fi
  357. echo "" >> $LOG
  358.  
  359. VERSION=`openvasmd --version | head -1 | sed -e "s/OpenVAS Manager //"`
  360.  
  361. if [ `echo $VERSION | grep "^$MANAGER_MAJOR\.$MANAGER_MINOR" | wc -l` -ne "1" ]
  362. then
  363. log_and_print "ERROR: OpenVAS Manager too old or too new: $VERSION"
  364. log_and_print "FIX: Please install OpenVAS Manager $MANAGER_MAJOR.$MANAGER_MINOR."
  365. check_failed
  366. fi
  367. echo "" >> $LOG
  368.  
  369. log_and_print "OK: OpenVAS Manager is present in version $VERSION."
  370.  
  371. # Check modified for kali
  372. echo "Checking OpenVAS Manager client certificate ..." >> $LOG
  373. CERTDIR=`dirname $CAFILE`
  374. CLIENTCERTFILE="$CERTDIR/clientcert.pem"
  375. if [ ! -e $CLIENTCERTFILE ]
  376. then
  377. log_and_print "ERROR: No client certificate file of OpenVAS Manager found."
  378. print_openvas_mkcert_client
  379. check_failed
  380. else
  381. if openssl verify -CAfile $CERTDIR/cacert.pem $CLIENTCERTFILE |grep -q ^error
  382. then
  383. log_and_print "ERROR: the client certificate file of OpenVAS Manager is not valid."
  384. print_openvas_mkcert_client
  385. check_failed
  386. else
  387. log_and_print "OK: OpenVAS Manager client certificate is valid and present as $CLIENTCERTFILE."
  388. fi
  389. fi
  390. echo "" >> $LOG
  391.  
  392. log_and_print "OK: OpenVAS Manager client certificate is present as $CLIENTCERTFILE."
  393.  
  394. echo "Checking OpenVAS Manager database ..." >> $LOG
  395. # Guess openvas state dir from $PLUGINSFOLDER
  396. STATEDIR=`dirname $PLUGINSFOLDER`
  397. TASKSDB="$STATEDIR/mgr/tasks.db"
  398. if [ ! -e $TASKSDB ]
  399. then
  400. log_and_print "ERROR: No OpenVAS Manager database found. (Tried: $TASKSDB)"
  401. log_and_print "FIX: Run 'openvasmd --rebuild' while OpenVAS Scanner is running."
  402.  
  403. OPENVASSD_RUNNING=`ps -Af | grep "openvassd: [Ww]aiting for incoming connections" | grep -v grep | wc -l`
  404. if [ $OPENVASSD_RUNNING -eq 0 ]
  405. then
  406. log_and_print "WARNING: OpenVAS Scanner is NOT running!" ;
  407. log_and_print "SUGGEST: Start OpenVAS Scanner (openvassd)." ;
  408. fi
  409.  
  410. check_failed
  411. fi
  412. echo "" >> $LOG
  413.  
  414. log_and_print "OK: OpenVAS Manager database found in $TASKSDB."
  415.  
  416. echo "Checking access rights of OpenVAS Manager database ..." >> $LOG
  417. TASKSDBPERMS=`stat -c "%a" "$TASKSDB"`
  418. if [ "$TASKSDBPERMS" != "600" ]
  419. then
  420. log_and_print "ERROR: The access rights of the OpenVAS Manager database are incorrect."
  421. log_and_print "FIX: Run 'chmod 600 $TASKSDB'."
  422. check_failed
  423. fi
  424. echo "" >> $LOG
  425.  
  426. log_and_print "OK: Access rights for the OpenVAS Manager database are correct."
  427.  
  428. echo "Checking sqlite3 presence ..." >> $LOG
  429. SQLITE3=`type sqlite3 2> /dev/null`
  430. if [ $? -ne 0 ]
  431. then
  432. log_and_print "WARNING: Could not find sqlite3 binary, extended manager checks of the OpenVAS Manager installation are disabled."
  433. log_and_print "SUGGEST: Install sqlite3."
  434. HAVE_SQLITE=0
  435. else
  436. log_and_print "OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled."
  437. HAVE_SQLITE=1
  438. fi
  439. echo "" >> $LOG
  440.  
  441. if [ $HAVE_SQLITE -eq 1 ]
  442. then
  443. echo "Checking OpenVAS Manager database revision ..." >> $LOG
  444. TASKSDBREV=`sqlite3 $TASKSDB "select value from meta where name='database_version';"`
  445. if [ -z $TASKSDBREV ]
  446. then
  447. log_and_print "ERROR: Could not determine database revision, database corrupt or in invalid format."
  448. log_and_print "FIX: Delete database at $TASKSDB and rebuild it."
  449. check_failed
  450. else
  451. log_and_print "OK: OpenVAS Manager database is at revision $TASKSDBREV."
  452. fi
  453. echo "Checking database revision expected by OpenVAS Manager ..." >> $LOG
  454. MANAGERDBREV=`openvasmd --version | grep "Manager DB revision" | sed -e "s/.*\ //"`
  455. if [ -z $MANAGERDBREV ]
  456. then
  457. log_and_print "ERROR: Could not determine database revision expected by OpenVAS Manager."
  458. log_and_print "FIX: Ensure OpenVAS Manager is installed correctly."
  459. check_failed
  460. else
  461. log_and_print "OK: OpenVAS Manager expects database at revision $MANAGERDBREV."
  462. fi
  463. if [ $TASKSDBREV -lt $MANAGERDBREV ]
  464. then
  465. log_and_print "ERROR: Database schema is out of date."
  466. log_and_print "FIX: Run 'openvasmd --migrate'."
  467. check_failed
  468. else
  469. log_and_print "OK: Database schema is up to date."
  470. fi
  471. echo "Checking OpenVAS Manager database (NVT data) ..." >> $LOG
  472. DBNVTCOUNT=`sqlite3 $TASKSDB "select count(*) from nvts;"`
  473. if [ $DBNVTCOUNT -lt 20000 ]
  474. then
  475. log_and_print "ERROR: The number of NVTs in the OpenVAS Manager database is too low."
  476. log_and_print "FIX: Make sure OpenVAS Scanner is running with an up-to-date NVT collection and run 'openvasmd --rebuild'."
  477.  
  478. OPENVASSD_RUNNING=`ps -Af | grep "openvassd: waiting for incoming connections" | grep -v grep | wc -l`
  479. if [ $OPENVASSD_RUNNING -eq 0 ]
  480. then
  481. log_and_print "WARNING: OpenVAS Scanner is NOT running!" ;
  482. log_and_print "SUGGEST: Start OpenVAS Scanner (openvassd)." ;
  483. fi
  484.  
  485. check_failed
  486. else
  487. log_and_print "OK: OpenVAS Manager database contains information about $DBNVTCOUNT NVTs."
  488. fi
  489. fi
  490.  
  491. if [ $ADMINISTRATOR_MAJOR = "0" ]
  492. then
  493. echo "Checking if users exist ..." >> $LOG
  494. if [ $VER != "7" ]
  495. then
  496. USERCOUNT=`openvasmd --get-users | sed -e "/^$/d" | wc -l`
  497. else
  498. USERCOUNT=`openvasmd --list-users | sed -e "/^$/d" | wc -l`
  499. fi
  500. if [ $USERCOUNT -eq 0 ]
  501. then
  502. log_and_print "ERROR: No users found. You need to create at least one user to log in."
  503. log_and_print " It is recommended to have at least one user with role Admin."
  504. log_and_print "FIX: create a user by running 'openvasmd --create-user=<name> --role=Admin && openvasmd --user=<name> --new-password=<password>'"
  505. check_failed
  506. else
  507. log_and_print "OK: At least one user exists."
  508. fi
  509. echo "" >> $LOG
  510. fi
  511.  
  512. # TODO: Do a check for presence of at least one Admin user.
  513.  
  514. echo "Checking OpenVAS SCAP database ..." >> $LOG
  515. # Guess openvas state dir from $PLUGINSFOLDER
  516. STATEDIR=`dirname $PLUGINSFOLDER`
  517. SCAPDB="$STATEDIR/scap-data/scap.db"
  518. if [ ! -e $SCAPDB ]
  519. then
  520. log_and_print "ERROR: No OpenVAS SCAP database found. (Tried: $SCAPDB)"
  521. log_and_print "FIX: Run a SCAP synchronization script like openvas-scapdata-sync or greenbone-scapdata-sync."
  522. check_failed
  523. fi
  524. echo "" >> $LOG
  525.  
  526. log_and_print "OK: OpenVAS SCAP database found in $SCAPDB."
  527.  
  528. if [ "$VER" -ge 6 ]
  529. then
  530. echo "Checking OpenVAS CERT database ..." >> $LOG
  531. # Guess openvas state dir from $PLUGINSFOLDER
  532. STATEDIR=`dirname $PLUGINSFOLDER`
  533. CERTDB="$STATEDIR/cert-data/cert.db"
  534. if [ ! -e $CERTDB ]
  535. then
  536. log_and_print "ERROR: No OpenVAS CERT database found. (Tried: $CERTDB)"
  537. log_and_print "FIX: Run a CERT synchronization script like openvas-certdata-sync or greenbone-certdata-sync."
  538. check_failed
  539. fi
  540. echo "" >> $LOG
  541.  
  542. log_and_print "OK: OpenVAS CERT database found in $CERTDB."
  543. fi
  544.  
  545. echo "Checking xsltproc presence ..." >> $LOG
  546. XSLTPROC=`type xsltproc 2> /dev/null`
  547. if [ $? -ne 0 ]
  548. then
  549. log_and_print "WARNING: Could not find xsltproc binary, most report formats will not work."
  550. log_and_print "SUGGEST: Install xsltproc."
  551. else
  552. log_and_print "OK: xsltproc found."
  553. fi
  554. echo "" >> $LOG
  555.  
  556.  
  557. if [ $ADMINISTRATOR_MAJOR != "0" ]
  558. then
  559. echo "Step 3: Checking OpenVAS Administrator ... "
  560.  
  561. echo "Checking presence of OpenVAS Administrator ..." >> $LOG
  562. openvasad --version >> $LOG 2>&1
  563. if [ $? -ne 0 ]
  564. then
  565. log_and_print "ERROR: No OpenVAS Administrator (openvasad) found."
  566. log_and_print "FIX: Please install OpenVAS Administrator."
  567. check_failed
  568. fi
  569. echo "" >> $LOG
  570.  
  571. VERSION=`openvasad --version | head -1 | sed -e "s/OpenVAS Administrator //"`
  572.  
  573. if [ `echo $VERSION | grep "^$ADMINISTRATOR_MAJOR\.$ADMINISTRATOR_MINOR" | wc -l` -ne "1" ]
  574. then
  575. log_and_print "ERROR: OpenVAS Administrator too old or too new: $VERSION"
  576. log_and_print "FIX: Please install OpenVAS Administrator $ADMINISTRATOR_MAJOR.$ADMINISTRATOR_MINOR."
  577. check_failed
  578. fi
  579. echo "" >> $LOG
  580.  
  581. log_and_print "OK: OpenVAS Administrator is present in version $VERSION."
  582.  
  583. echo "Checking if users exist ..." >> $LOG
  584. USERCOUNT=`openvasad -c "list_users" | sed -e "/^$/d" | wc -l`
  585. if [ $USERCOUNT -eq 0 ]
  586. then
  587. log_and_print "ERROR: No users found. You need to create at least one user to log in."
  588. log_and_print " It is recommended to have at least one user with role Admin."
  589. log_and_print "FIX: Create a user using 'openvasad -c 'add_user' -n <name> --role=Admin'"
  590. check_failed
  591. else
  592. log_and_print "OK: At least one user exists."
  593. fi
  594. echo "" >> $LOG
  595.  
  596. echo "Checking if at least one admin user exists ..." >> $LOG
  597. ADMINEXISTS=`ls $STATEDIR/users/*/isadmin 2> /dev/null`
  598. if [ $? -ne 0 ]
  599. then
  600. log_and_print "ERROR: No admin user found. You need to create at least one admin user to log in."
  601. log_and_print "FIX: Create a user using 'openvasad -c 'add_user' -n <name> -r Admin'"
  602. check_failed
  603. else
  604. log_and_print "OK: At least one admin user exists."
  605. fi
  606. echo "" >> $LOG
  607. else
  608. echo "Step 3: Checking user configuration ... "
  609. # TODO: Here we need new tests for presense of user and admin. Possibly based
  610. # on sqlite3 calls (which in turn means to check for sqlite3 which isn't a runtime
  611. # requirement for OpenVAS).
  612. fi
  613.  
  614. if [ $VER -ge 6 ]
  615. then
  616. echo "Checking status of password policy ..." >> $LOG
  617. CONFFILE=`openvassd -s 2>>$LOG | grep config_file | sed -e "s/^config_file = //"`
  618. CONFDIR=`dirname $CONFFILE`
  619. grep -v "^[#]" $CONFDIR/pwpolicy.conf | grep -v "^$" > /dev/null 2>&1
  620. if [ $? -ne 0 ]
  621. then
  622. log_and_print "WARNING: Your password policy is empty."
  623. log_and_print "SUGGEST: Edit the $CONFDIR/pwpolicy.conf file to set a password policy."
  624. else
  625. log_and_print "OK: The password policy file at $CONFDIR/pwpolicy.conf contains entries."
  626. fi
  627. echo "" >> $LOG
  628. fi
  629.  
  630. echo "Step 4: Checking Greenbone Security Assistant (GSA) ... "
  631.  
  632. echo "Checking presence of Greenbone Security Assistant ..." >> $LOG
  633. gsad --version >> $LOG 2>&1
  634. if [ $? -ne 0 ]
  635. then
  636. log_and_print "ERROR: No Greenbone Security Assistant (gsad) found."
  637. log_and_print "FIX: Please install Greenbone Security Assistant."
  638. check_failed
  639. fi
  640. echo "" >> $LOG
  641.  
  642. VERSION=`gsad --version | head -1 | sed -e "s/Greenbone Security Assistant //"`
  643.  
  644. if [ `echo $VERSION | grep "^$GSA_MAJOR\.$GSA_MINOR" | wc -l` -ne "1" ]
  645. then
  646. log_and_print "ERROR: Greenbone Security Assistant too old or too new: $VERSION"
  647. log_and_print "FIX: Please install Greenbone Security Assistant $GSA_MAJOR.$GSA_MINOR."
  648. check_failed
  649. fi
  650. echo "" >> $LOG
  651.  
  652. log_and_print "OK: Greenbone Security Assistant is present in version $VERSION."
  653.  
  654. echo "Step 5: Checking OpenVAS CLI ... "
  655.  
  656. if [ "$MODE" != "server" ]
  657. then
  658. echo "Checking presence of OpenVAS CLI ..." >> $LOG
  659. omp --version >> $LOG 2>&1
  660. if [ $? -ne 0 ]
  661. then
  662. log_and_print "ERROR: No OpenVAS CLI (omp) found."
  663. log_and_print "FIX: Please install OpenVAS CLI."
  664. check_failed
  665. fi
  666. echo "" >> $LOG
  667.  
  668. VERSION=`omp --version | head -1 | sed -e "s/OMP Command Line Interface //"`
  669.  
  670. if [ `echo $VERSION | grep "^$CLI_MAJOR\.$CLI_MINOR" | wc -l` -ne "1" ]
  671. then
  672. log_and_print "ERROR: OpenVAS CLI too old or too new: $VERSION"
  673. log_and_print "FIX: Please install OpenVAS CLI $CLI_MAJOR.$CLI_MINOR."
  674. check_failed
  675. fi
  676. echo "" >> $LOG
  677.  
  678. log_and_print "OK: OpenVAS CLI version $VERSION."
  679. else
  680. log_and_print "SKIP: Skipping check for OpenVAS CLI."
  681. fi
  682.  
  683.  
  684. echo "Step 6: Checking Greenbone Security Desktop (GSD) ... "
  685.  
  686. if [ "$MODE" != "server" -a "$VER" -le 6 ]
  687. then
  688. echo "Checking presence of Greenbone Security Desktop ..." >> $LOG
  689.  
  690. DISPLAY=fake gsd --version >> $LOG 2>&1
  691. if [ $? -ne 0 ]
  692. then
  693. if [ "$VER" -ge 6 ]
  694. then
  695. log_and_print "WARNING: No Greenbone Security Desktop (gsd) found or too old."
  696. log_and_print "SUGGEST: Please install Greenbone Security Desktop $GSD_MAJOR.$GSD_MINOR."
  697. else
  698. log_and_print "ERROR: No Greenbone Security Desktop (gsd) found or too old."
  699. log_and_print "FIX: Please install Greenbone Security Desktop $GSD_MAJOR.$GSD_MINOR."
  700. check_failed
  701. fi
  702. log_and_print "SKIP: Skipping further check for Greenbone Security Desktop."
  703. else
  704. echo "" >> $LOG
  705.  
  706. VERSION=`gsd --version | head -1 | sed -e "s/Greenbone Security Desktop //"`
  707.  
  708. if [ `echo $VERSION | grep "^$GSD_MAJOR\.$GSD_MINOR" | wc -l` -ne "1" ]
  709. then
  710. if [ $VER -lt "6" ]
  711. then
  712. log_and_print "ERROR: Greenbone Security Desktop too old or too new: $VERSION"
  713. log_and_print "FIX: Please install Greenbone Security Desktop $GSD_MAJOR.$GSD_MINOR."
  714. check_failed
  715. else
  716. log_and_print "WARNING: Greenbone Security Desktop too old or too new: $VERSION"
  717. log_and_print "SUGGEST: Please install Greenbone Security Desktop $GSD_MAJOR.$GSD_MINOR."
  718. fi
  719. fi
  720. echo "" >> $LOG
  721.  
  722. log_and_print "OK: Greenbone Security Desktop is present in Version $VERSION."
  723. fi
  724. else
  725. log_and_print "SKIP: Skipping check for Greenbone Security Desktop."
  726. fi
  727.  
  728.  
  729. echo "Step 7: Checking if OpenVAS services are up and running ... "
  730.  
  731. echo "Checking netstat presence ..." >> $LOG
  732. NETSTAT=`type netstat 2> /dev/null`
  733. if [ $? -ne 0 ]
  734. then
  735. log_and_print "WARNING: Could not find netstat binary, checks of the OpenVAS services are disabled."
  736. log_and_print "SUGGEST: Install netstat."
  737. HAVE_NETSTAT=0
  738. else
  739. log_and_print "OK: netstat found, extended checks of the OpenVAS services enabled."
  740. HAVE_NETSTAT=1
  741. fi
  742. echo "" >> $LOG
  743.  
  744. if [ $HAVE_NETSTAT -eq 1 ]
  745. then
  746. netstat -A inet -A inet6 -ntlp 2> /dev/null >> $LOG
  747. OPENVASSD_HOST=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep openvassd | awk -F\ '{print $4}' | awk -F: 'sub(FS $NF,x)'`
  748. OPENVASSD_PORT=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep openvassd | awk -F\ '{print $4}' | awk -F: '{print $NF}'`
  749. OPENVASMD_HOST=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep openvasmd | awk -F\ '{print $4}' | awk -F: 'sub(FS $NF,x)'`
  750. OPENVASMD_PORT=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep openvasmd | awk -F\ '{print $4}' | awk -F: '{print $NF}'`
  751. OPENVASAD_HOST=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep openvasad | awk -F\ '{print $4}' | awk -F: 'sub(FS $NF,x)'`
  752. OPENVASAD_PORT=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep openvasad | awk -F\ '{print $4}' | awk -F: '{print $NF}'`
  753. GSAD_HOST=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep gsad | awk -F\ '{print $4}' | awk -F: 'sub(FS $NF,x)'`
  754. GSAD_PORT=`netstat -A inet -A inet6 -ntlp 2> /dev/null | grep gsad | awk -F\ '{print $4}' | awk -F: '{print $NF}' | tail -1`
  755.  
  756. case "$OPENVASSD_HOST" in
  757. "0.0.0.0"|"::") log_and_print "OK: OpenVAS Scanner is running and listening on all interfaces." ;;
  758. "127.0.0.1") log_and_print "OK: OpenVAS Scanner is running and listening only on the local interface." ;;
  759. "") OPENVASSD_PROC=`ps -Af | grep "openvassd: waiting for incoming connections" | grep -v grep | wc -l`
  760. if [ $OPENVASSD_PROC -eq 0 ]
  761. then
  762. log_and_print "ERROR: OpenVAS Scanner is NOT running!" ;
  763. log_and_print "FIX: Start OpenVAS Scanner (openvassd)." ;
  764. OPENVASSD_PORT=-1 ;
  765. else
  766. log_and_print "WARNING: OpenVAS Scanner seems to be run by another user!" ;
  767. log_and_print "FIX: If intended this is OK (e.g. as root). But we can not determine the port." ;
  768. log_and_print "FIX: You might face subsequent problems if not intended." ;
  769. OPENVASSD_PORT=1 ;
  770. fi
  771. ;;
  772. esac
  773. case $OPENVASSD_PORT in
  774. -1) ;;
  775. 9391) log_and_print "OK: OpenVAS Scanner is listening on port 9391, which is the default port." ;;
  776. *) log_and_print "WARNING: OpenVAS Scanner is listening on port $OPENVASSD_PORT, which is NOT the default port!"
  777. log_and_print "SUGGEST: Ensure OpenVAS Scanner is listening on port 9391." ;;
  778. esac
  779.  
  780. case "$OPENVASMD_HOST" in
  781. "0.0.0.0"|"::") log_and_print "OK: OpenVAS Manager is running and listening on all interfaces." ;;
  782. "127.0.0.1") log_and_print "WARNING: OpenVAS Manager is running and listening only on the local interface."
  783. log_and_print "This means that you will not be able to access the OpenVAS Manager from the"
  784. log_and_print "outside using GSD or OpenVAS CLI."
  785. log_and_print "SUGGEST: Ensure that OpenVAS Manager listens on all interfaces unless you want"
  786. log_and_print "a local service only." ;;
  787. "") log_and_print "ERROR: OpenVAS Manager is NOT running!"
  788. log_and_print "FIX: Start OpenVAS Manager (openvasmd)."
  789. OPENVASMD_PORT=-1 ;;
  790. esac
  791. case $OPENVASMD_PORT in
  792. -1) ;;
  793. 9390) log_and_print "OK: OpenVAS Manager is listening on port 9390, which is the default port." ;;
  794. *) log_and_print "WARNING: OpenVAS Manager is listening on port $OPENVASMD_PORT, which is NOT the default port!"
  795. log_and_print "SUGGEST: Ensure OpenVAS Manager is listening on port 9390." ;;
  796. esac
  797.  
  798. if [ $ADMINISTRATOR_MAJOR != "0" ]
  799. then
  800. case "$OPENVASAD_HOST" in
  801. "0.0.0.0") log_and_print "OK: OpenVAS Administrator is running and listening on all interfaces." ;;
  802. "127.0.0.1") log_and_print "OK: OpenVAS Administrator is running and listening only on the local interface." ;;
  803. "") log_and_print "ERROR: OpenVAS Administrator is NOT running!"
  804. log_and_print "FIX: Start OpenVAS Administrator (openvasad)."
  805. OPENVASAD_PORT=-1 ;;
  806. esac
  807. case $OPENVASAD_PORT in
  808. -1) ;;
  809. 9393) log_and_print "OK: OpenVAS Administrator is listening on port 9393, which is the default port." ;;
  810. *) log_and_print "WARNING: OpenVAS Administrator is listening on port $OPENVASAD_PORT, which is NOT the default port!"
  811. log_and_print "SUGGEST: Ensure OpenVAS Administrator is listening on port 9393." ;;
  812. esac
  813. else
  814. OPENVASAD_PORT=1; # to make this not a failure because we do not need openvasad at all
  815. fi
  816.  
  817. case "$GSAD_HOST" in
  818. "0.0.0.0"|"::") log_and_print "OK: Greenbone Security Assistant is running and listening on all interfaces." ;;
  819. "127.0.0.1") log_and_print "WARNING: Greenbone Security Assistant is running and listening only on the local interface."
  820. log_and_print "This means that you will not be able to access the Greenbone Security Assistant from the"
  821. log_and_print "outside using a web browser."
  822. log_and_print "SUGGEST: Ensure that Greenbone Security Assistant listens on all interfaces." ;;
  823. "") log_and_print "ERROR: Greenbone Security Assistant is NOT running!"
  824. log_and_print "FIX: Start Greenbone Security Assistant (gsad)."
  825. GSAD_PORT=-1 ;;
  826. esac
  827. case $GSAD_PORT in
  828. -1) ;;
  829. 80|443|9392) log_and_print "OK: Greenbone Security Assistant is listening on port $GSAD_PORT, which is the default port." ;;
  830. *) log_and_print "WARNING: Greenbone Security Assistant is listening on port $GSAD_PORT, which is NOT the default port!"
  831. log_and_print "SUGGEST: Ensure Greenbone Security Assistant is listening on one of the following ports: 80, 443, 9392." ;;
  832. esac
  833.  
  834. if [ $OPENVASSD_PORT -eq -1 ] || [ $OPENVASMD_PORT -eq -1 ] || [ $OPENVASAD_PORT -eq -1 ] || [ $GSAD_PORT -eq -1 ]
  835. then
  836. check_failed
  837. fi
  838.  
  839. fi
  840.  
  841. echo "Step 8: Checking nmap installation ..."
  842.  
  843. echo "Checking presence of nmap ..." >> $LOG
  844. VERSION=`nmap --version | awk '/Nmap version/ { print $3 }'`
  845.  
  846. if [ $? -ne 0 ]
  847. then
  848. log_and_print "WARNING: No nmap installation found."
  849. log_and_print "SUGGEST: You should install nmap for comprehensive network scanning (see http://nmap.org)"
  850. else
  851. if [ `echo $VERSION | grep "5\.51" | wc -l` -ne "1" ]
  852. then
  853. log_and_print "WARNING: Your version of nmap is not fully supported: $VERSION"
  854. log_and_print "SUGGEST: You should install nmap 5.51 if you plan to use the nmap NSE NVTs."
  855. else
  856. log_and_print "OK: nmap is present in version $VERSION."
  857. fi
  858. fi
  859. echo "" >> $LOG
  860.  
  861. echo "Step 10: Checking presence of optional tools ..."
  862.  
  863. echo "Checking presence of pdflatex ..." >> $LOG
  864. PDFLATEX=`type pdflatex 2> /dev/null`
  865. if [ $? -ne 0 ]
  866. then
  867. log_and_print "WARNING: Could not find pdflatex binary, the PDF report format will not work."
  868. log_and_print "SUGGEST: Install pdflatex."
  869. HAVE_PDFLATEX=0
  870. else
  871. log_and_print "OK: pdflatex found."
  872. HAVE_PDFLATEX=1
  873. fi
  874. echo "" >> $LOG
  875.  
  876. if [ $HAVE_PDFLATEX -eq 1 ]
  877. then
  878. echo "Checking presence of LaTeX packages required for PDF report generation ..." >> $LOG
  879. PDFTMPDIR=`mktemp -d -t openvas-check-setup-tmp.XXXXXXXXXX`
  880. TEXFILE="$PDFTMPDIR/test.tex"
  881. cat <<EOT > $TEXFILE
  882. \documentclass{article}
  883. \pagestyle{empty}
  884.  
  885. %\usepackage{color}
  886. \usepackage{tabularx}
  887. \usepackage{geometry}
  888. \usepackage{comment}
  889. \usepackage{longtable}
  890. \usepackage{titlesec}
  891. \usepackage{chngpage}
  892. \usepackage{calc}
  893. \usepackage{url}
  894. \usepackage[utf8x]{inputenc}
  895.  
  896. \DeclareUnicodeCharacter {135}{{\textascii ?}}
  897. \DeclareUnicodeCharacter {129}{{\textascii ?}}
  898. \DeclareUnicodeCharacter {128}{{\textascii ?}}
  899.  
  900. \usepackage{colortbl}
  901.  
  902. % must come last
  903. \usepackage{hyperref}
  904. \definecolor{linkblue}{rgb}{0.11,0.56,1}
  905. \definecolor{inactive}{rgb}{0.56,0.56,0.56}
  906. \definecolor{openvas_debug}{rgb}{0.78,0.78,0.78}
  907. \definecolor{openvas_false_positive}{rgb}{0.2275,0.2275,0.2275}
  908. \definecolor{openvas_log}{rgb}{0.2275,0.2275,0.2275}
  909. \definecolor{openvas_hole}{rgb}{0.7960,0.1137,0.0902}
  910. \definecolor{openvas_note}{rgb}{0.3255,0.6157,0.7961}
  911. \definecolor{openvas_report}{rgb}{0.68,0.74,0.88}
  912. \definecolor{openvas_user_note}{rgb}{1.0,1.0,0.5625}
  913. \definecolor{openvas_user_override}{rgb}{1.0,1.0,0.5625}
  914. \definecolor{openvas_warning}{rgb}{0.9764,0.6235,0.1922}
  915. \hypersetup{colorlinks=true,linkcolor=linkblue,urlcolor=blue,bookmarks=true,bookmarksopen=true}
  916. \usepackage[all]{hypcap}
  917.  
  918. %\geometry{verbose,a4paper,tmargin=24mm,bottom=24mm}
  919. \geometry{verbose,a4paper}
  920. \setlength{\parskip}{\smallskipamount}
  921. \setlength{\parindent}{0pt}
  922.  
  923. \title{PDF Report Test}
  924. \pagestyle{headings}
  925. \pagenumbering{arabic}
  926. \begin{document}
  927. This is a test of the PDF generation capabilities of your OpenVAS installation. Please ignore.
  928. \end{document}
  929. EOT
  930. pdflatex -interaction batchmode -output-directory $PDFTMPDIR $TEXFILE > /dev/null 2>&1
  931. if [ ! -f "$PDFTMPDIR/test.pdf" ]
  932. then
  933. log_and_print "WARNING: PDF generation failed, most likely due to missing LaTeX packages. The PDF report format will not work."
  934. log_and_print "SUGGEST: Install required LaTeX packages."
  935. else
  936. log_and_print "OK: PDF generation successful. The PDF report format is likely to work."
  937. fi
  938. if [ -f "$PDFTMPDIR/test.log" ]
  939. then
  940. cat $PDFTMPDIR/test.log >> $LOG
  941. fi
  942. rm -rf $PDFTMPDIR
  943. fi
  944.  
  945. echo "Checking presence of ssh-keygen ..." >> $LOG
  946. SSHKEYGEN=`type ssh-keygen 2> /dev/null`
  947. if [ $? -ne 0 ]
  948. then
  949. log_and_print "WARNING: Could not find ssh-keygen binary, LSC credential generation for GNU/Linux targets will not work."
  950. log_and_print "SUGGEST: Install ssh-keygen."
  951. HAVE_SSHKEYGEN=0
  952. else
  953. log_and_print "OK: ssh-keygen found, LSC credential generation for GNU/Linux targets is likely to work."
  954. HAVE_SSHKEYGEN=1
  955. fi
  956. echo "" >> $LOG
  957.  
  958. if [ $HAVE_SSHKEYGEN -eq 1 ]
  959. then
  960. echo "Checking presence of rpm ..." >> $LOG
  961. RPM=`type rpm 2> /dev/null`
  962. if [ $? -ne 0 ]
  963. then
  964. log_and_print "WARNING: Could not find rpm binary, LSC credential package generation for RPM and DEB based targets will not work."
  965. log_and_print "SUGGEST: Install rpm."
  966. HAVE_RPM=0
  967. else
  968. log_and_print "OK: rpm found, LSC credential package generation for RPM based targets is likely to work."
  969. HAVE_RPM=1
  970. fi
  971. echo "" >> $LOG
  972.  
  973. if [ $HAVE_RPM -eq 1 ]
  974. then
  975. echo "Checking presence of alien ..." >> $LOG
  976. ALIEN=`type alien 2> /dev/null`
  977. if [ $? -ne 0 ]
  978. then
  979. log_and_print "WARNING: Could not find alien binary, LSC credential package generation for DEB based targets will not work."
  980. log_and_print "SUGGEST: Install alien."
  981. HAVE_ALIEN=0
  982. else
  983. log_and_print "OK: alien found, LSC credential package generation for DEB based targets is likely to work."
  984. HAVE_ALIEN=1
  985. fi
  986. echo "" >> $LOG
  987. fi
  988. fi
  989.  
  990. echo "Checking presence of nsis ..." >> $LOG
  991. NSIS=`type makensis 2> /dev/null`
  992. if [ $? -ne 0 ]
  993. then
  994. log_and_print "WARNING: Could not find makensis binary, LSC credential package generation for Microsoft Windows targets will not work."
  995. log_and_print "SUGGEST: Install nsis."
  996. HAVE_NSIS=0
  997. else
  998. log_and_print "OK: nsis found, LSC credential package generation for Microsoft Windows targets is likely to work."
  999. HAVE_NSIS=1
  1000. fi
  1001.  
  1002. echo "Checking for SELinux ..." >> $LOG
  1003. selinux=`getenforce 2>/dev/null`
  1004. if [ $? -eq 0 ]
  1005. then
  1006. if [ $selinux != "Disabled" ]
  1007. then
  1008. log_and_print "ERROR: SELinux is enabled. For a working OpenVAS installation you need to disable it."
  1009. log_and_print "FIX: Please disable SELinux."
  1010. check_failed
  1011. else
  1012. log_and_print "OK: SELinux is disabled."
  1013. fi
  1014. fi
  1015.  
  1016. echo "" >> $LOG
  1017.  
  1018. echo ""
  1019. echo "It seems like your OpenVAS-$VER installation is OK."
  1020. echo ""
  1021. echo "If you think it is not OK, please report your observation"
  1022. echo "and help us to improve this check routine:"
  1023. echo "http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss"
  1024. echo "Please attach the log-file ($LOG) to help us analyze the problem."
  1025. echo ""
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!