diff options
| author | V3n3RiX <venerix@redcorelinux.org> | 2019-08-18 18:16:17 +0100 |
|---|---|---|
| committer | V3n3RiX <venerix@redcorelinux.org> | 2019-08-18 18:16:17 +0100 |
| commit | fc637fb28da700da71ec2064d65ca5a7a31b9c6c (patch) | |
| tree | 326613a08f25851c388715e205576a2e7d25dc4f /net-analyzer/openvas-scanner | |
| parent | b24bd25253fe093f722ab576d29fdc41d04cb1ee (diff) | |
gentoo resync : 18.08.2019
Diffstat (limited to 'net-analyzer/openvas-scanner')
15 files changed, 1 insertions, 1553 deletions
diff --git a/net-analyzer/openvas-scanner/Manifest b/net-analyzer/openvas-scanner/Manifest index 9f0a632a3b60..c6890335a0ce 100644 --- a/net-analyzer/openvas-scanner/Manifest +++ b/net-analyzer/openvas-scanner/Manifest @@ -1,9 +1,3 @@ -AUX first-start 28455 BLAKE2B 901e9a107a0ddef7d19b73eeddb6dd1e5fe00df849e0a81c115c6b002f8e4627658ab0a6849e0cc72f9cd9153df8076367feef30a4d3868c6fb36b1ba14cc284 SHA512 74e60c8e5d36933770c7acadb8534cf2bd7b0b527a179e4f766fd892278f6bd5883c2e9a10d94eab1e0c16172027fe828154dcd8da80d0832a23ae266f9bfa4e -AUX openvas-feed-sync 32429 BLAKE2B 8035b20c47ec40d63f62a3cc81d86273991c079bf5c6661fe7b6e4a74a9ea99bc660df254060c208f077b722e7b8a34b49b93edbb9dfa91f26fd2750fd3ba65f SHA512 6211a630890c0733c15254c61723074a70a16a08726c90f4141eda306eadedeb07937f4a31d37b6fde1e0e9166f582fe0b6f6e2740f9cebecb8fa88abe0fdc0c -AUX openvas-nvt-sync-cron 759 BLAKE2B f1b3d35f5a7426fcfe954d30a5860144cfa854463699634d49e49487db865ad0d005163edca201e5e4ff0ad540f9b234122629520ba1131b6a4edfdd0ea72b7c SHA512 88f299141e66e9d95f565307bd121c56c005f412dcdb64e105d9d4252cfb43e218f1de7b40b500d71b415d2aa437468ce1e935dec32cda8c5efc4f733978b0dc -AUX openvas-scanner-4.0.3-mkcertclient.patch 1350 BLAKE2B feb9fec17ed2a6efc58eb2f4ea7847b745190864878cae5701bd8c2db91d73b1cd9dfa78baba5e3b449d5d0485fbd6af0dceee647cd79d268b1740e647d930dd SHA512 972eda6fe3a7b7ba195fd9198d6b63add4e0af5ff9e34e423afac945d5dd497bd65f993d7ceda3848741cb954c5517e263533867e2da7d37bcc8905e926b4f72 -AUX openvas-scanner-4.0.3-rulesdir.patch 607 BLAKE2B 9b4c2eafca38e4ccf0b71168e9b633c2287c83b08096372bbf89092e5ff9ca32808f92273a01582c74b18911f96496808fe1a726e3589c930cdf9a41d3635144 SHA512 81002d66e103bb3d0d087a2037f0431739d5d664ada3e6b9bdc9d31e67159d7da0664d43e83501bf9dd01b6887bff14b02a883e261f3273ed42a27dd4ee53fa5 -AUX openvas-scanner-4.0.3-run.patch 672 BLAKE2B 519e2eb0b5e6532148e2d2f9e3d757912eec52bafeb0dc880cfd355094ca1f03256f3e868e42c628e5b55c1742f695fe0a661b6abe0b81fe4b3172bd5af11fef SHA512 d39c0861b27623f05ecc5f962b3bf580d457c6056c11d07f903908a33a1b1a25e0098934310e01483aee7b28198b23aea34974b9864432a8dfe2600ed993f5ee AUX openvas-scanner-5.1.3-cachedir.patch 1605 BLAKE2B d5e54d1196000fe9f8a65efcf3d71f3ef29af1cfff5fedbfe7cd753a731e6bd4be6c1f24534b87a2194dcfa146d156ed0ddae076e72bfd229e1e01497985d7a1 SHA512 27efb9e318137390592652db1444141910ddf7975ada760bc6914c21c4eb11e4ded1aa377c37f5c7a67dfd145ec723fd77bbdd9b8ac0af6bf317a07d54642d11 AUX openvas-scanner-5.1.3-gcc8.patch 1253 BLAKE2B ef876d70238b3b0fdaea320fdb9bcffc520bbe6762f220678a39bd99853fcabb27ed3bd44a0e02a7e1e8b93d3af530e4d4b33baaf1060c8b0589593ef5b30e8e SHA512 817e27de3b2d16bce81d3c1abbc6ced63cd6f272762ac00a8bc9ab6c5ccb765c81df1158caed58c64f897712c78fb7f0a02dcb2137dd859c3d48725e6e2699d6 AUX openvas-scanner-5.1.3-nvt.patch 2576 BLAKE2B fed6211a6c4e9f1bed4abedf218e17f0d863e59de869424398d845e479d037f96758486fc03727c14e036814c2efa4e9dab940e032507339a1b6f2f2cda4c4c6 SHA512 b3f6b8cba51fb6c6d0eab189391a848e8f33d24f3b59bcd8f48b562812b1f79a46f3b92b01a8f231a765616fde6c0b37634f9845a5e4ba453c4aeeafed0ce8c1 @@ -12,16 +6,8 @@ AUX openvas-scanner.init 620 BLAKE2B a32349eed21d71e4968ee09fdff007aab532943e093 AUX openvas-scanner.logrotate 222 BLAKE2B 264e3b0fa47f7d933ee1f9c5d120e267a8387df8c8e5cfb8b09b23d28b983c666684430dc9aa389938dac71bef69480d74ab24fd393134ed33d9a3518314c91e SHA512 1c8b50626de9bcd7d26323d82d28ae4d25f5ce0382cfb0b16b91e58e75c05f565c7cdf19fe441647b5cd3c2ebc312b171eb6fa22c310fac1f76a0629544f030c AUX openvas-scanner.service 455 BLAKE2B be6f94c3d383ea1c647effc462aeddac384e4c2507a9f1145d4dc39badcb810cbca7d4c8eba74e64942d2a5895b058cad7ac3fdcfaa4c5de7335cefcb70db366 SHA512 108a13b9cbbb86acc99a4271fa5b1a051022e42f30866bd490ae606c1ffac202c61aa5bf5a1f7ee10b276484135f8f868625debbb142a802c0ff2a4c011a8206 AUX openvas-scanner.tmpfiles.d 28 BLAKE2B b9343651fc4923451b02a5f72cad7da95e4d790a7b77eb72ca239588568a5d2b88cad1f9f698ad61403c332a44005989e8d6e67ff1ad06cab26abdf67f8d8621 SHA512 b5d98625495353d32bdcaecf5499e2cbe3a8b1a84b067018b61f2ce6e110b0e3a14a061e8791c08891a7058976555a2c7971b48c90f690605129deb457b7b754 -AUX openvassd 460 BLAKE2B 34edb97d0d00013914f29cb2bb2bf051be48427ccffdb64a323db5aef6bcd754d19d73a3413e4226cefcad4ad1f51d11f7bbcd3abdc91e422513a8b0ef007710 SHA512 ebe0ffbafa172a6776c537efc4910683dd0ed6954502708981cc0110ddc8e84c7a31f1c384365354e37b872b3cf3fdae94413949b7f00f3d6500a35e64f73cf9 -AUX openvassd-daemon.conf 821 BLAKE2B 37500de5f3a2731e71da3ba262bbdf5a0444903fe43f318f82310373e9fa8136f567fcd51536d5a4971fa7c690448528e506ccf99377aa2acd4b2b1f6ed93bf2 SHA512 fd8344f9c37c872868e44608a593bc7843163177b726eef31047b7357e3b5949e4c2d54be1acf8fe6642ba63a6e225e4f9c3650a9861b30174d66fd7341aefc3 AUX openvassd.conf 1288 BLAKE2B d1ae7db928d797014e0382d8be3a08793efbcaa3663629c0d1c6c2d871ccf16588605fa4be21d71556893092b21ecfef72c31d40411d35dd97f8652eca6232c0 SHA512 5bb499fcd03aac4de981a64a17fa760b29b1f83d0afcdb73cdfdeb0f492b02bc383d32544fd133c6b953e73ea9ff0dc042e8dba76c22def3ee00d6f3bdd980b8 -AUX openvassd.init 638 BLAKE2B 8c86e700d30e08a355de8a64d0937a233adda53a26acb4a3e7999e9d992de6b18d957ffef4eb9f9ee9a0dde6bae8a35e4372a62027524f91a0c792f564e504f8 SHA512 a03608d42c90b56d832bd15628d565f8d6e00f35e8072af46e3915693f9647b010fec89d3b2006d38c4d5b2adbaf269953ab2250e7e661b2fbfa50391a55eaeb -AUX openvassd.logrotate 209 BLAKE2B d3ac1128f5c91a9e2a247a9fedc928045d13218534107fdfb7bc39d3b4264a8cdaafb1bcd385956c08bbfac29aa73d260e07d893f4696fd36131104db19f115c SHA512 5934a31ef4b7267fd741c41bb97fe2e1e42735d2324cce07145de1942efae3f5e42e8652ec0c3482dd53477be420a58124eae943f254105547abf065febb9046 -AUX openvassd.service 353 BLAKE2B cbced6ebe3a4e1ecf12534ec14d860a4f221824cf9cdcee0eddb3da7d7566b841a8a52fd118c9fdfd3d875ec1728856a4eb9619f22a1111aab3c48f68eabb150 SHA512 418ca16f7cbfd5a2e7aff031810c9166743738eaa8b38ded7eb763796364c77dd4d19a09705a2da81df1b4591e2a0f7beed5d075c75a205133148903ec23f8f4 -AUX openvassd.tmpfiles.d 28 BLAKE2B b9343651fc4923451b02a5f72cad7da95e4d790a7b77eb72ca239588568a5d2b88cad1f9f698ad61403c332a44005989e8d6e67ff1ad06cab26abdf67f8d8621 SHA512 b5d98625495353d32bdcaecf5499e2cbe3a8b1a84b067018b61f2ce6e110b0e3a14a061e8791c08891a7058976555a2c7971b48c90f690605129deb457b7b754 AUX redis.conf.example 1351 BLAKE2B ad1a99404360b76144944793b2994554799bcc6624abce68524773b7f748075b8bcec79dcf94d2f400132a424a5147a3675d67f48d23a46e28a6afdca83e50a3 SHA512 b5024c26696f49e5d453cef7a0e3838a3fa557b2339a250f95d5367a30564b8a62733c86901ae000f62e916d73162188fbca1c56ed3a078dd99e8e8db1cc2c64 -DIST openvas-scanner-5.0.4.tar.gz 236282 BLAKE2B 3105afe0fd819773b33c8194e0addaad70af4692578fe3bfbd76166004ca99e25f2f22a946810fe52da747242f1e45bae00766c4687676ec70df2d7349fa4509 SHA512 51267f832a104897a497b5dc71d1b804de4db77742e2234d111a00b1e0e01536613b16ff48d23a37013178b016b39408a25d18a694980c7e6fc600824e05e149 DIST openvas-scanner-5.1.3.tar.gz 254159 BLAKE2B d90fa15e143ead53abce66f933a3a4cac327176cca0f23bd88fe771ed7726b1891784ae980644c8335e560d348753115e43cfae83af9704e2d1d02827163563f SHA512 5712ab275058877cfd656e268ed09c81db6617ae247c17092f1fcd037f692f2018daf21b09b82401f99a7361bb485f0e0f7d63f8ff2387839cfdd5a3aaf8424e -EBUILD openvas-scanner-5.0.4-r1.ebuild 1558 BLAKE2B 72a9e2d5ed1d6ee81be46eeb4cd23383a5ffc73b0d8bd4901fc4f17c2c98068141fb9a75b565ef40e4c525cfc36829ac090520318180b38af61e5ab4618da04b SHA512 8a6f8a1fbe310ad43eb341f02dee3b75da7dc3031a9d5407f6cca41787d558ef77d2301dd96ee6a56752ed6b91b26ee2e44cfea648c021651c2fdc59bf458b72 -EBUILD openvas-scanner-5.1.3.ebuild 2304 BLAKE2B d8fb1924fdf21515595b02adff02d4b2fe68ac5adc2d04c9b5494399e820f545e3d1abdbecdfeb18d7e0ee9f3d43830cc72fe77d1766e1d5553339b23a485e9a SHA512 366a47e6ef15ae474b0654c65c061e947c41adc3e0b2aba491ebec86d2f211e4f9b50c4b3d1b33bf72afc3eeda4ce49e92999853eb3e10ca3d66c7483a1273e2 +EBUILD openvas-scanner-5.1.3.ebuild 2142 BLAKE2B 5984c99659d1a41c3739a1de5077f5ca8dd25c668e97c7a1f59a6efceb95fed25daceb8c8f6b5971c842e016d1843dff8527d253d1347ea0d91a67d633c2d859 SHA512 d66a67f3803c071f20e6a1c9132ca771e9286f9c6446e781b6077323ae32417d2061169543c34de91f3a9ca1ec7a4bfaf9472aead66b983a46d163ea88137480 MISC metadata.xml 435 BLAKE2B 4d40c4dcffe9bfd81d1c1b517b4e6d6e1e658f9d6be65f8ad962ecbbee78bf0cc6bbb5805f2e056375c7371697a453453f8eeae40bae1bdf890be8f3e23ccfbc SHA512 fc802728917b8ebc3c43e3c35ce1fa7b8aa30d89d60abcfcd82eb6baf0152d02384b2e336664942bd89c3ed27a418f37a13699b68a424f36645c51c1310a6e16 diff --git a/net-analyzer/openvas-scanner/files/first-start b/net-analyzer/openvas-scanner/files/first-start deleted file mode 100755 index 95811a56b19d..000000000000 --- a/net-analyzer/openvas-scanner/files/first-start +++ /dev/null @@ -1,634 +0,0 @@ -#!/bin/bash -# Copyright 1999-2019 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 -# This is OpenVAS first-start/check-setup script which make things automatically for first time use. - - -################################################################################################## -# If you use systemd or init.d(open-rc) for OpenVAS daemons you don't need to set below settings.# -# If you don't use any of them you can set the below command args to start daemons manually. # -################################################################################################## - -# OpenVAS Manager command args -OPENVAS_MANAGER_OPTIONS="" # e.g --foreground -OPENVAS_MANAGER_PORT="--port=9390" # Manager listen port -OPENVAS_MANAGER_LISTEN_ADDRESS="--listen=127.0.0.1" # Manager listen address -OPENVAS_MANAGER_SCANNER_HOST="--scanner-host=/var/run/openvassd.sock" # Scanner unix socket -OPENVAS_MANAGER_GNUTLS_PRIORITIES="--gnutls-priorities=SECURE256:+SUITEB192:+SECURE192:+SECURE128:+SUITEB128:-MD5:-SHA1:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-SSL3.0" - -# OpenVAS Scanner command args -OPENVAS_SCANNER_OPTIONS="" # e.g --foreground -OPENVAS_SCANNER_LISTEN_SOCKET="--unix-socket=/var/run/openvassd.sock" # Scanner listen socket - -# OpenVAS Security Assistant command args for reverse proxying | SSL PassThrough -OPENVAS_SECURITY_ASSISTANT_OPTIONS="--no-redirect" # Don't listen port 80 anymore for reverse proxy -OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS="--listen=127.0.0.1" # WebUI adress -OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT="--port=9392" # WebUI Port -OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS="--mlisten=127.0.0.1" # WebUI Manager Address -OPENVAS_SECURITY_ASSISTANT_MANAGER_PORT="--mport=9390" # WebUI Manager Port -OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES="--gnutls-priorities=NORMAL" # TLS Settings - -##################################################################################################### - -# Update Environment -source /etc/profile &>/dev/null -source /etc/environment &>/dev/null -source ~/.bash_profile &>/dev/null - -# Check the needed executables.They are in our environment and have +x? -if ! [ -x "$(command -v openvasmd)" ] || - ! [ -x "$(command -v openvassd)" ] || - ! [ -x "$(command -v redis-server)" ] || - ! [ -x "$(command -v openvas-manage-certs)" ] || - ! [ -x "$(command -v greenbone-nvt-sync)" ] || - ! [ -x "$(command -v greenbone-scapdata-sync)" ] || - ! [ -x "$(command -v greenbone-certdata-sync)" ]; then - path="1" - else - path="0" -fi - -# Check Security-Assistant is exist -if ! [ -x "$(command -v gsad)" ]; then - gsad="1" - else - gsad="0" -fi -# Executables are not in our environment -if [ $path -eq 1 ]; then - echo "Can't find executables! If you installed OpenVAS to specific location e.g. /opt" - echo "please add these PATHS to /etc/profile,also sure that they are executable" - exit 1 -fi - -# Check systemd and enable services for Gentoo/Linux -if command -v systemctl &>/dev/null; then - systemctl="0" - echo "systemd found." - systemctl enable openvas-scanner.service &>/dev/null - if [ $? -eq 0 ]; then - echo "systemd.Gentoo --> openvas-scanner.service enabled." - fi - systemctl enable gvmd.service &>/dev/null - if [ $? -eq 0 ]; then - echo "systemd.Gentoo --> gvmd.service enabled." - fi - systemctl enable gsa.service &>/dev/null - if [ $? -eq 0 ]; then - echo "systemd.Gentoo --> gsa.service enabled." - fi - else - systemctl="1" -fi - -# Check open-rc if exist -if command -v rc-service &>/dev/null; then - open_rc="0" - else - open_rc="1" -fi - -# open-rc variables -if [ $systemctl -eq 1 ] && [ $open_rc -eq 0 ]; then - echo "open-rc found." - scanner_init="0" - manager_init="0" - assistant_init="0" - redis_init="0" -fi - -# Check status of OpenVAS-Scanner systemd unit -if [ $systemctl -eq 0 ] && - ([ "$(systemctl is-active openvas-scanner.service)" = "active" ] || - [ "$(systemctl list-unit-files | grep 'enabled' | grep 'openvas-scanner.service' | awk '{print $1}')" = "openvas-scanner.service" ]); then - scanner="0" - else - scanner="1" -fi - -# Check status of OpenVAS-Manager systemd unit -if [ $systemctl -eq 0 ] && - ([ "$(systemctl is-active gvmd.service)" = "active" ] || - [ "$(systemctl list-unit-files | grep 'enabled' | grep 'gvmd.service' | awk '{print $1}')" = "gvmd.service" ]); then - manager="0" - else - manager="1" -fi - -# Check status of OpenVAS-Assistant systemd unit -if [ $systemctl -eq 0 ] && - ([ "$(systemctl is-active gsa.service)" = "active" ] || - [ "$(systemctl list-unit-files | grep 'enabled' | grep 'gsa.service' | awk '{print $1}')" = "gsa.service" ]); then - assistant="0" - else - assistant="1" -fi - -# Check status of Redis systemd unit -if [ $systemctl -eq 0 ] && - ([ "$(systemctl is-active redis.service)" = "active" ] || - [ "$(systemctl list-unit-files | grep 'enabled' | grep 'redis.service' | awk '{print $1}')" = "redis.service" ]); then - redis="0" - else - redis="1" -fi - -# We need to find correct service name for restarting. -if [ $scanner -eq 1 ] || [ $manager -eq 1 ] || [ $assistant -eq 1 ] || [ $redis -eq 1 ]; then - WHICHM="ExecStart=$(type openvasmd | awk '{print $3}')" - WHICHS="ExecStart=$(type openvassd | awk '{print $3}')" - WHICHA="ExecStart=$(type gsad | awk '{print $3}')" - WHICHR="ExecStart=$(type redis-server | awk '{print $3}')" - - # If you have unordinary systemd path you can add here - DIR="/lib/systemd/system/ - /etc/systemd/system/ - /usr/lib/systemd/system/ - /usr/local/lib/systemd/system/" - - # Find OpenVAS daemons systemd files if exist - for i in $DIR; do - if [ -d "$i" ]; then - grep -rilnw "$i" -e "$WHICHM" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_manager_service.out - grep -rilnw "$i" -e "$WHICHS" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_scanner_service.out - grep -rilnw "$i" -e "$WHICHA" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_assistant_service.out - grep -rilnw "$i" -e "$WHICHR" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_redis_service.out - fi - done - - manager_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_manager_service.out)" - scanner_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_scanner_service.out)" - assistant_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_assistant_service.out)" - redis_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_redis_service.out)" - - rm -rf /tmp/openvas_GVM* - COUNTM=$(wc -w <<< "${manager_service}") - COUNTS=$(wc -w <<< "${scanner_service}") - COUNTA=$(wc -w <<< "${assistant_service}") - COUNTR=$(wc -w <<< "${redis_service}") - - if [ -n "$manager_service" ] && [ $manager -eq 1 ]; then - if [ "$(systemctl list-unit-files | grep 'enabled' | grep $manager_service | awk '{print $1}')" = "$manager_service" ]; then - echo "systemd --> OpenVAS Manager '$manager_service' found." - else - echo "systemd --> '$manager_service' found but not enabled." - echo "are you sure this is the correct systemd service for Openvas Manager" - while true; do - read -n 1 -p "do you want to enable '$manager_service'? --> (Y)es | (N)o | (Q)uit" answer - echo - case $answer in - [Yy]* ) systemctl enable "$manager_service" &>/dev/null; echo "systemd --> '$manager_service' enabled"; break;; - [Nn]* ) manager_service=""; echo "it seems you are not sure.ok i don't use $manager_service"; break;; - [Qq]* ) exit;; - * ) echo "Please answer yes,no or quit.";; - esac - done - fi - fi - - if [ -n "$scanner_service" ] && [ $scanner -eq 1 ]; then - if [ "$(systemctl list-unit-files | grep 'enabled' | grep $scanner_service | awk '{print $1}')" = "$scanner_service" ]; then - echo "systemd --> OpenVAS Scanner '$scanner_service' found." - else - echo "systemd --> '$scanner_service' found but not enabled." - echo "are you sure this is the correct systemd service for Openvas Scanner" - while true; do - read -n 1 -p "do you want to enable '$scanner_service'? --> (Y)es | (N)o | (Q)uit" answer - echo - case $answer in - [Yy]* ) systemctl enable "$scanner_service" &>/dev/null; echo "systemd --> '$scanner_service' enabled"; break;; - [Nn]* ) scanner_service=""; echo "it seems you are not sure.ok i don't use $scanner_service"; break;; - [Qq]* ) exit;; - * ) echo "Please answer yes,no or quit.";; - esac - done - fi - fi - - if [ -n "$assistant_service" ] && [ $scanner -eq 1 ]; then - if [ "$(systemctl list-unit-files | grep 'enabled' | grep $assistant_service | awk '{print $1}')" = "$assistant_service" ]; then - echo "systemd --> GSA '$assistant_service' found." - else - echo "systemd --> '$assistant_service' found but not enabled." - echo "are you sure this is the correct systemd service for Greenbone Security Assistant" - while true; do - read -n 1 -p "do you want to enable '$assistant_service'? --> (Y)es | (N)o | (Q)uit" answer - echo - case $answer in - [Yy]* ) systemctl enable "$assistant_service" &>/dev/null; echo "systemd --> '$assistant_service' enabled"; break;; - [Nn]* ) assistant_service=""; echo "it seems you are not sure.ok i don't use $assistant_service"; break;; - [Qq]* ) exit;; - * ) echo "please answer yes,no or quit.";; - esac - done - fi - fi - - if [ -n "$redis_service" ] && [ $scanner -eq 1 ]; then - if [ "$(systemctl list-unit-files | grep 'enabled' | grep $redis_service | awk '{print $1}')" = "$redis_service" ]; then - echo "systemd --> redis '$redis_service' found." - else - echo "systemd --> '$redis_service' found but not enabled." - echo "are you sure this is the correct systemd service for redis-server" - while true; do - read -n 1 -p "do you want to enable '$redis_service'? --> (Y)es | (N)o | (Q)uit" answer - echo - case $answer in - [Yy]* ) systemctl enable "$redis_service" &>/dev/null; echo "systemd --> '$redis_service' enabled"; break;; - [Nn]* ) redis_service=""; echo "it seems you are not sure.ok i don't use $redis_service"; break;; - [Qq]* ) exit;; - * ) echo "please answer yes,no or quit.";; - esac - done - fi - fi - - if [ $COUNTM -gt 1 ] || [ $COUNTS -gt 1 ] || [ $COUNTR -gt 1 ]; then - echo "you have more than one enabled systemd service for single daemon" - echo " check OpenVAS and Redis systemd unit files to fix it" - exit 1 - fi -fi - -restart_redis () { -if [ $redis -eq 0 ]; then - systemctl restart redis.service &>/dev/null - if [ $? -eq 0 ]; then - echo "systemd --> redis.service is restarted." - else - echo "systemd --> redis.service cannot restarted." - exit 1 - fi -elif [[ -n "$redis_service" ]]; then - systemctl restart "$redis_service" &>/dev/null - if [ $? -eq 0 ]; then - echo "systemd --> $redis_service is restarted." - else - echo "systemd --> $redis_service cannot restarted." - exit 1 - fi -elif [[ -n "$redis_init" ]]; then - rc-service redis stop - sleep 5 - rc-service redis start - if [ $? -eq 0 ]; then - echo "open-rc --> redis is restarted." - else - echo "open-rc --> redis cannot restarted." - exit 1 - fi -fi -} - -build_nvt () { -if ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" &>/dev/null; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - openvassd --foreground --only-cache &>/dev/null - if [ $? -eq 0 ]; then - echo "building NVT cache is done." - else - echo "building NVT cache is failed.." - exit 1 - fi - else - openvassd --foreground --only-cache &>/dev/null - if [ $? -eq 0 ]; then - echo "building NVT cache is done." - else - echo "building NVT cache is failed.." - exit 1 - fi -fi -} - -create_user () { -GREEN="`tput setaf 2`" -RED="`tput setaf 1`" -norm="`tput sgr0`" -echo "creating WebUI User.." -openvasmd --create-user=admin --role=Admin &>/tmp/openvas_user.out -if [ $? -eq 0 ]; then - username="admin" - password="$(cat /tmp/openvas_user.out | awk '{print $5}' | cut -c2-)" - echo "${RED}!WebUI Address : ${GREEN}127.0.0.1:9392" - echo "${RED}!WebUI Username: ${GREEN}$username" - echo "${RED}!WebUI Password: ${GREEN}${password%??}${norm}" - else - echo "$(cat /tmp/openvas_user.out)" - echo "these are active users for WebUI" - openvasmd --get-users -fi -rm -rf /tmp/openvas_user.out -} - -# Redis & OpenVAS Scanner socket connection check for Gentoo/Linux -if [[ -e /etc/redis.conf ]]; then - if [ "$(openvassd -s | grep 'kb_location' | awk '{print $3}')" = "$(cat /etc/redis.conf | grep -P '(^|\s)\Kunixsocket(?=\s|$)' | awk '{print $2}')" ]; then - echo "redis server properly configured." - else - redis_sock="$(openvassd -s | grep 'kb_location' | awk '{print $3}')" - echo "redis server is not properly configured." - echo "be sure redis server listening unix socket at $redis_sock" - echo "you can find example redis.conf file in /etc/openvas/redis.conf.example" - exit 1 - fi -fi - -# Redis & OpenVAS Scanner socket connection check for other linux distros -if [[ -e /etc/redis/redis.conf ]]; then - if [ "$(openvassd -s | grep 'kb_location' | awk '{print $3}')" = "$(cat /etc/redis/redis.conf | grep -P '(^|\s)\Kunixsocket(?=\s|$)' | awk '{print $2}')" ]; then - echo "redis server properly configured." - else - redis_sock="$(openvassd -s | grep 'kb_location' | awk '{print $3}')" - echo "redis server is not properly configured." - echo "be sure redis server listening unix socket at $redis_sock" - exit 1 - fi -fi - -# Create certificates for fresh install -openvas-manage-certs -a &>/dev/null -if [ $? -eq 0 ]; then - echo "certificates created." - -elif [ "$(openvas-manage-certs -a | grep -ow 'Existing')" = "Existing" ]; then - echo "certificates already created." - -else - echo "certificates cannot created." - exit 1 -fi - -# Start to update FEED & First NVT. -try=0 -until [ $try -ge 5 ]; do - greenbone-nvt-sync &>/dev/null && break - echo "can't connected! trying to update greenbone-nvt again.." - try=$[$try+1] - sleep 30 -done - -# Check status -if [ $? -eq 0 ]; then - echo "greenbone-nvt-sync is done." - # Avoid your IP temporary banned because of multiple connection - sleep 5 - # Try to update scapdata. - try=0 - until [ $try -ge 5 ]; do - greenbone-scapdata-sync &>/dev/null && break - echo "can't connected! trying to update greenbone-scapdata again.." - try=$[$try+1] - sleep 30 - done - # Check status - if [ $? -eq 0 ]; then - echo "greenbone-scapdata-sync is done." - # Avoid your IP temporary banned because of multiple connection - sleep 5 - # Try to update certdata - try=0 - until [ $try -ge 5 ]; do - greenbone-certdata-sync &>/dev/null && break - echo "can't connected! Trying to update greenbone-certdata again.." - try=$[$try+1] - sleep 30 - done - # Check status - if [ $? -eq 0 ]; then - echo "greenbone-certdata-sync is done." - echo "building NVT cache this will take some time.." - build_nvt - # Check OpenVAS-Scanner is running - if ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" &>/dev/null; then - echo "OpenVAS-Scanner is running." - echo "building Database this will take some time.." - openvasmd --rebuild --progress &>/dev/null - elif [ $scanner -eq 0 ]; then - # Start OpenVAS-Scanner systemd unit & Rebuild Cache - echo "systemd --> OpenVAS-Scanner is not running! trying to up.." - systemctl start openvas-scanner.service &>/dev/null - if [ $? -eq 0 ]; then - # Wait for initialize - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "waiting for OpenVAS-Scanner to become ready.." - done - echo "systemd --> openvas-scanner.service started and waiting for connection." - echo "building database this will take some time.." - # Rebuild Cache - openvasmd --rebuild --progress &>/dev/null - else - echo "systemd --> openvas-scanner.service cannot started.." - exit 1 - fi - elif [[ -n "$scanner_service" ]]; then - echo "systemd --> OpenVAS-Scanner is down! trying to up.." - systemctl start "$scanner_service" &>/dev/null - if [ $? -eq 0 ]; then - # Wait for initialize - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "waiting for OpenVAS-Scanner to become ready.." - done - echo "systemd --> $scanner_service is started and waiting for connection." - echo "building database this will take some time.." - # Rebuild Cache - openvasmd --rebuild --progress &>/dev/null - else - echo "systemd --> $scanner_service cannot started.." - exit 1 - fi - elif [[ -n "$scanner_init" ]]; then - # Start OpenVAS-Scanner with init.d (open-rc) & Rebuild Cache - echo "open-rc --> OpenVAS-Scanner is down! trying to up.." - rc-service openvas-scanner start &>/dev/null - if [ $? -eq 0 ]; then - # Wait for initialize - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "waiting for OpenVAS-Scanner to become ready.." - done - echo "rc-service --> openvas-scanner started and waiting for connection." - echo "building database this will take some time.." - # Rebuild Cache - openvasmd --rebuild --progress &>/dev/null - else - echo "rc-service --> openvas-scanner cannot started.." - exit 1 - fi - else - echo "OpenVAS-Scanner is not running! Trying to up.." - openvassd "$OPENVAS_SCANNER_OPTIONS" "$OPENVAS_SCANNER_LISTEN_SOCKET" &>/dev/null - # Wait for initialize - if [ $? -eq 0 ]; then - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "waiting for OpenVAS-Scanner to become ready.." - done - else - echo "OpenVAS Scanner cannot started manually.." - exit 1 - fi - echo "OpenVAS-Scanner started manually and waiting for connection." - echo "building database this will take some time.." - # Rebuild Cache - openvasmd --rebuild --progress &>/dev/null - fi - # Check status - if [ $? -eq 0 ]; then - echo "building database is done" - create_user - # Restart OpenVAS-Scanner - if [ $scanner -eq 0 ]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - restart_redis - sleep 3 - systemctl restart openvas-scanner.service &>/dev/null - elif [[ -n "$scanner_service" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - restart_redis - sleep 3 - systemctl restart "$scanner_service" &>/dev/null - elif [[ -n "$scanner_init" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - restart_redis - sleep 3 - rc-service openvas-scanner start &>/dev/null - else - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - restart_redis - sleep 3 - openvassd "$OPENVAS_SCANNER_OPTIONS" "$OPENVAS_SCANNER_LISTEN_SOCKET" &>/dev/null - fi - if [ $? -eq 0 ]; then - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 10 - echo "waiting for OpenVAS-Scanner to become ready.." - done - echo "OpenVAS-Scanner is restarted." - # Restart OpenVAS-Manager - if [ $manager -eq 0 ]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart gvmd.service &>/dev/null - if [ $? -eq 0 ]; then - success="0" - echo "systemd --> gvmd.service is restarted." - echo "OpenVAS setup is ok." - else - echo "systemd --> gvmd.service cannot restarted." - echo "OpenVAS setup is not ok!" - exit 1 - fi - elif [[ -n "$manager_service" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart "$manager_service" &>/dev/null - if [ $? -eq 0 ]; then - success="0" - echo "systemd --> $manager_service is restarted" - echo "OpenVAS setup is ok." - else - echo "systemd --> $manager_service cannot restarted" - echo "OpenVAS setup is not ok!" - exit 1 - fi - elif [[ -n "$manager_init" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - rc-service gvmd start &>/dev/null - if [ $? -eq 0 ]; then - success="0" - echo "open-rc --> gvmd is restarted" - echo "OpenVAS setup is ok." - else - echo "open-rc --> gvmd cannot restarted" - echo "OpenVAS setup is not ok!" - exit 1 - fi - else - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - openvasmd "$OPENVAS_MANAGER_OPTIONS" "$OPENVAS_MANAGER_PORT" "$OPENVAS_MANAGER_LISTEN_ADDRESS" "$OPENVAS_MANAGER_SCANNER_HOST" "$OPENVAS_MANAGER_GNUTLS_PRIORITIES" &>/dev/null - if [ $? -eq 0 ]; then - success="0" - echo "OpenVAS-Manager is restarted manually" - echo "OpenVAS setup is ok." - else - echo "OpenVAS-Manager cannot restarted" - echo "OpenVAS setup is not ok!" - exit 1 - fi - fi - else - echo "OpenVAS setup is not ok! OpenVAS-scanner cannot restarted." - fi - else - echo "OpenVAS setup is not ok! OpenVAS database build failed." - fi - else - echo "OpenVAS setup is not ok! OpenVAS Certdata sync failed." - fi - else - echo "OpenVAS setup is not ok! OpenVAS Scapdata sync failed." - fi - else - echo "OpenVAS setup is not ok! OpenVAS NVT sync update failed." -fi - -# Restart WebUI -if [[ -n "$success" ]] && [ $gsad -eq 0 ]; then - WHICHA="$(type gsad | awk '{print $3}')" - if [ $assistant -eq 0 ]; then - # Time to restart OpenVAS-Security Assistant - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart gsa.service &>/dev/null - if [ $? -eq 0 ]; then - echo "systemd --> gsa.service (OpenVAS WebUI) is restarted and ready for connection" - else - echo "systemd --> gsa.service (OpenVAS-WebUI) cannot restarted" - fi - elif [[ -n "$assistant_service" ]]; then - if [ $COUNTA -eq 1 ]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart "$assistant_service" &>/dev/null - if [ $? -eq 0 ]; then - echo "systemd --> $assistant_service (OpenVAS WebUI) is restarted and ready for connection" - else - echo "systemd --> $assistan_service (OpenVAS WebUI) cannot restarted." - fi - else - echo "systemd --> OpenVAS WebUI cannot restarted! you have multiple enabled systemd services ($assistant_service)" - exit 1 - fi - elif [[ -n "$assistant_init" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - rc-service gsa start &>/dev/null - if [ $? -eq 0 ]; then - echo "open-rc --> gsa (OpenVAS WebUI) is restarted" - else - echo "open-rc --> gsa (OpenVAS WebUI) cannot restarted." - fi - else - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - gsad "$OPENVAS_SECURITY_ASSISTANT_OPTIONS" "$OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS" "$OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT" "$OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS" "$OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_PORT" "$OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES" &>/dev/null - if [ $? -eq 0 ]; then - echo "OpenVAS WebUI is restarted" - else - echo "OpenVAS WebUI cannot restarted" - fi - fi -fi diff --git a/net-analyzer/openvas-scanner/files/openvas-feed-sync b/net-analyzer/openvas-scanner/files/openvas-feed-sync deleted file mode 100755 index de1c69038aba..000000000000 --- a/net-analyzer/openvas-scanner/files/openvas-feed-sync +++ /dev/null @@ -1,627 +0,0 @@ -#!/bin/bash -# Copyright 1999-2019 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 -# This is OpenVAS cron script that updates feed and reload daemons. -# Hasan ÇALIŞIR hsntgm@gmail.com | proxy maintainer - -# Mail settings -MAIL_TO="root" -MAIL_SUBJECT="CronJob-OpenVAS" - -# If you don't use systemd or open-rc for OpenVAS daemons you can set start command args here -# while we manually start/restart them. -#################################################################################################### - -# OpenVAS Manager command args -OPENVAS_MANAGER_OPTIONS="" # e.g --foreground -OPENVAS_MANAGER_PORT="--port=9390" # Manager listen port -OPENVAS_MANAGER_LISTEN_ADDRESS="--listen=127.0.0.1" # Manager listen address -OPENVAS_MANAGER_SCANNER_HOST="--scanner-host=/var/run/openvassd.sock" # Scanner unix socket -OPENVAS_MANAGER_GNUTLS_PRIORITIES="--gnutls-priorities=SECURE256:+SUITEB192:+SECURE192:+SECURE128:+SUITEB128:-MD5:-SHA1:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-SSL3.0" - -# OpenVAS Scanner command args -OPENVAS_SCANNER_OPTIONS="" # e.g --foreground -OPENVAS_SCANNER_LISTEN_SOCKET="--unix-socket=/var/run/openvassd.sock" # Scanner listen socket - -# OpenVAS Security Assistant command args for reverse proxying | SSL PassThrough -OPENVAS_SECURITY_ASSISTANT_OPTIONS="--no-redirect" # Don't listen port 80 anymore -OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS="--listen=127.0.0.1" # WebUI adress -OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT="--port=9392" # WebUI Port -OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS="--mlisten=127.0.0.1" # WebUI Manager Address -OPENVAS_SECURITY_ASSISTANT_MANAGER_PORT="--mport=9390" # WebUI Manager Port -OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES="--gnutls-priorities=NORMAL" # TLS Settings - -##################################################################################################### - -# Update Environment -source /etc/profile &>/dev/null -source /etc/environment &>/dev/null -source ~/.bash_profile &>/dev/null - -# Check the needed executables if they are in our environment and have +x -if ! [ -x "$(command -v openvasmd)" ] || ! [ -x "$(command -v openvassd)" ] || ! [ -x "$(command -v redis-server)" ]; then - path="1" - else - path="0" -fi - -# Check Security-Assistant is exist -if ! [ -x "$(command -v gsad)" ]; then - gsad="1" - else - gsad="0" -fi - -# Executables are not in our environment -if [ $path -eq 1 ]; then - echo "OpenVAS CronJob Failed! If you installed OpenVAS to specific location e.g. /opt" | tee -a /tmp/openvas_mail.out - echo "please add these PATHS to /etc/profile e.g. 'PATH=$PATH:/opt/openvas/bin:/opt/openvas/sbin'" | tee -a /tmp/openvas_mail.out - echo "also sure that they are executable e.g. 'chmod +x /opt/openvas/sbin/openvassd'" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 -fi - -# Check systemd if exist -if command -v systemctl &>/dev/null; then - systemctl="0" - else - systemctl="1" -fi - -# Check open-rc if exist -if command -v rc-service &>/dev/null; then - open_rc="0" - else - open_rc="1" -fi - -# open-rc variables -if [ $systemctl -eq 1 ] && [ $open_rc -eq 0 ]; then - scanner_init="0" - manager_init="0" - assistant_init="0" - redis_init="0" -fi - -# Check OpenVAS-Scanner systemd unit(common name) is active or enabled -if [ $systemctl -eq 0 ] && ([ "$(systemctl is-active openvassd.service)" = "active" ] || [ "$(systemctl list-unit-files | grep 'enabled' | grep 'openvassd.service' | awk '{print $1}')" = "openvassd.service" ]); then - scanner="0" - else - scanner="1" -fi - -# Check OpenVAS-Manager systemd unit(common name) is active or enabled -if [ $systemctl -eq 0 ] && ([ "$(systemctl is-active openvasmd.service)" = "active" ] || [ "$(systemctl list-unit-files | grep 'enabled' | grep 'openvasmd.service' | awk '{print $1}')" = "openvasmd.service" ]); then - manager="0" - else - manager="1" -fi - -# Check OpenVAS-Assistant systemd unit(common name) is active or not -if [ $systemctl -eq 0 ] && ([ "$(systemctl is-active gsad.service)" = "active" ] || [ "$(systemctl list-unit-files | grep 'enabled' | grep 'gsad.service' | awk '{print $1}')" = "gsad.service" ]); then - assistant="0" - else - assistant="1" -fi - -# Check Redis systemd unit(common name) is active or not -if [ $systemctl -eq 0 ] && ([ "$(systemctl is-active redis.service)" = "active" ] || [ "$(systemctl list-unit-files | grep 'enabled' | grep 'redis.service' | awk '{print $1}')" = "redis.service" ]); then - redis="0" - else - redis="1" -fi - -# If you don't use common systemd service names for OpenVAS -# We need to find correct service name for restarting. -if [ $scanner -eq 1 ] || [ $manager -eq 1 ]; then - WHICHM="ExecStart=$(type openvasmd | awk '{print $3}')" - WHICHS="ExecStart=$(type openvassd | awk '{print $3}')" - WHICHA="ExecStart=$(type gsad | awk '{print $3}')" - WHICHR="ExecStart=$(type redis-server | awk '{print $3}')" - - # If you have unordinary systemd services PATH you can add here - DIR="/lib/systemd/system/ - /etc/systemd/system/ - /usr/lib/systemd/system/ - /usr/local/lib/systemd/system/" - - # Find OpenVAS daemons systemd files - for i in $DIR; do - if [ -d "$i" ]; then - grep -rilnw "$i" -e "$WHICHM" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_manager_service.out - grep -rilnw "$i" -e "$WHICHS" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_scanner_service.out - grep -rilnw "$i" -e "$WHICHA" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_assistant_service.out - grep -rilnw "$i" -e "$WHICHR" | cut -d: -f1 | grep -oP "$i\K.*" &>>/tmp/openvas_GVM_redis_service.out - fi - done - - # Time to get our exact systemd service searching in enabled services - manager_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep "enabled" | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_manager_service.out)" - - scanner_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep "enabled" | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_scanner_service.out)" - - assistant_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep "enabled" | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_assistant_service.out)" - - redis_service="$(while IFS= read -r service; do - systemctl list-unit-files | grep "enabled" | grep -P "(^|\s)\K$service(?=\s|$)" | awk '{print $1}' - done < /tmp/openvas_GVM_redis_service.out)" - - rm -rf /tmp/openvas_GVM* - COUNTM=$(wc -w <<< "${manager_service}") - COUNTS=$(wc -w <<< "${scanner_service}") - COUNTA=$(wc -w <<< "${assistant_service}") - COUNTR=$(wc -w <<< "${redis_service}") - - if [ $COUNTM -gt 1 ] || [ $COUNTS -gt 1 ] || [ $COUNTR -gt 1 ]; then - echo "OpenVAS CronJob Failed! You have multiple enabled systemd service for single OpenVAS daemon or redis" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi -fi - -# Start to update FEED & First NVT. -try=0 -until [ $try -ge 5 ]; do - greenbone-nvt-sync &>/dev/null && break - echo "Can't connected! Trying to update greenbone-nvt again.." &>>/tmp/openvas_mail.out - try=$[$try+1] - sleep 30 -done - -# Check status -if [ $? -eq 0 ]; then - echo "greenbone-nvt-sync is done" &>>/tmp/openvas_mail.out - # Avoid your IP temporary banned because of multiple connection - sleep 5 - # Try to update scapdata. - try=0 - until [ $try -ge 5 ]; do - greenbone-scapdata-sync &>/dev/null && break - echo "Can't connected! Trying to update greenbone-scapdata again.." &>>/tmp/openvas_mail.out - try=$[$try+1] - sleep 30 - done - - # Check status - if [ $? -eq 0 ]; then - echo "greenbone-scapdata-sync is done" &>>/tmp/openvas_mail.out - # Avoid your IP temporary banned because of multiple connection - sleep 5 - # Try to update certdata - try=0 - until [ $try -ge 5 ]; do - greenbone-certdata-sync &>/dev/null && break - echo "Can't connected! Trying to update greenbone-certdata again.." &>>/tmp/openvas_mail.out - try=$[$try+1] - sleep 30 - done - - # Check status - if [ $? -eq 0 ]; then - echo "greenbone-certdata-sync is done" &>>/tmp/openvas_mail.out - - # Check OpenVAS-Scanner is running - if ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" &>/dev/null; then - echo "OpenVAS-Scanner is running." &>>/tmp/openvas_mail.out - openvasmd --update --progress &>/dev/null - - elif [ $scanner -eq 0 ]; then - # Start OpenVAS-Scanner systemd unit & Rebuild Cache - echo "OpenVAS-Scanner is down! Trying to up.." &>>/tmp/openvas_mail.out - systemctl start openvassd.service &>/dev/null - - if [ $? -eq 0 ]; then - # Wait for initialize - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "Waiting for OpenVAS-Scanner to become ready.." &>>/tmp/openvas_mail.out - done - echo "openvassd.service started and waiting for connection." &>>/tmp/openvas_mail.out - # Rebuild Cache - openvasmd --update --progress &>/dev/null - else - echo "openvassd.service cannot started.." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$scanner_service" ]]; then - echo "OpenVAS-Scanner is down! Trying to up.." &>>/tmp/openvas_mail.out - systemctl start "$scanner_service" &>/dev/null - - if [ $? -eq 0 ]; then - # Wait for initialize - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "Waiting for OpenVAS-Scanner to become ready.." &>>/tmp/openvas_mail.out - done - echo "$scanner_service is started and waiting for connection." &>>/tmp/openvas_mail.out - # Rebuild Cache - openvasmd --update --progress &>/dev/null - else - echo "$scanner_service cannot started.." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$scanner_init" ]]; then - # Start OpenVAS-Scanner with init.d (open-rc) & Rebuild Cache - echo "OpenVAS-Scanner is down! Trying to up.." &>>/tmp/openvas_mail.out - rc-service openvassd start &>/dev/null - - if [ $? -eq 0 ]; then - # Wait for initialize - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "Waiting for OpenVAS-Scanner to become ready.." &>>/tmp/openvas_mail.out - done - echo "rc-service --> openvassd started and waiting for connection." &>>/tmp/openvas_mail.out - # Rebuild Cache - openvasmd --update --progress &>/dev/null - else - echo "rc-service --> openvassd cannot started.." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - else - echo "OpenVAS-Scanner is down! Trying to up.." &>>/tmp/openvas_mail.out - openvassd "$OPENVAS_SCANNER_OPTIONS" "$OPENVAS_SCANNER_LISTEN_SOCKET" &>/dev/null - # Wait for initialize - if [ $? -eq 0 ]; then - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 15 - echo "Waiting for OpenVAS-Scanner to become ready.." &>>/tmp/openvas_mail.out - done - else - echo "OpenVAS Scanner cannot started manually.." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - echo "OpenVAS-Scanner started manually and waiting for connection." &>>/tmp/openvas_mail.out - # Rebuild Cache - openvasmd --update --progress &>/dev/null - fi - - # Check status - if [ $? -eq 0 ]; then - echo "Updating NVT cache is done" &>>/tmp/openvas_mail.out - - # Restart OpenVAS-Scanner - if [ $scanner -eq 0 ]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 3 - - # Try to restart redis service before OpenVAS-Scanner - if [ $redis -eq 0 ]; then - systemctl restart redis.service &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> redis.service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> redis.service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_service" ]]; then - systemctl restart "$redis_service" &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> $redis_service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> $redis_service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_init" ]]; then - rc-service redis stop - sleep 5 - rc-service redis start - - if [ $? -eq 0 ]; then - echo "open-rc --> redis is restarted." &>>/tmp/openvas_mail.out - else - echo "open-rc --> redis cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - fi - systemctl restart openvassd.service &>/dev/null - - elif [[ -n "$scanner_service" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 3 - - # Try to restart redis service before OpenVAS-Scanner - if [ $redis -eq 0 ]; then - systemctl restart redis.service &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> redis.service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> redis.service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_service" ]]; then - systemctl restart "$redis_service" &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> $redis_service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> $redis_service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_init" ]]; then - rc-service redis stop - sleep 5 - rc-service redis start - - if [ $? -eq 0 ]; then - echo "open-rc --> redis is restarted." &>>/tmp/openvas_mail.out - else - echo "open-rc --> redis cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - fi - systemctl restart "$scanner_service" &>/dev/null - - elif [[ -n "$scanner_init" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 3 - - # Try to restart redis service before OpenVAS-Scanner - if [ $redis -eq 0 ]; then - systemctl restart redis.service &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> redis.service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> redis.service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_service" ]]; then - systemctl restart "$redis_service" &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> $redis_service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> $redis_service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_init" ]]; then - rc-service redis stop - sleep 5 - rc-service redis start - - if [ $? -eq 0 ]; then - echo "open-rc --> redis is restarted." &>>/tmp/openvas_mail.out - else - echo "open-rc --> redis cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - fi - rc-service openvassd start &>/dev/null - - else - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvassd:(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 3 - - # Try to restart redis service before OpenVAS-Scanner - if [ $redis -eq 0 ]; then - systemctl restart redis.service &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> redis.service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> redis.service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_service" ]]; then - systemctl restart "$redis_service" &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> $redis_service is restarted." &>>/tmp/openvas_mail.out - else - echo "systemd --> $redis_service cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$redis_init" ]]; then - rc-service redis stop - sleep 5 - rc-service redis start - - if [ $? -eq 0 ]; then - echo "open-rc --> redis is restarted." &>>/tmp/openvas_mail.out - else - echo "open-rc --> redis cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - fi - openvassd "$OPENVAS_SCANNER_OPTIONS" "$OPENVAS_SCANNER_LISTEN_SOCKET" &>/dev/null - fi - - if [ $? -eq 0 ]; then - until [ "$(ps aux | grep -v 'grep' | grep -ow 'openvassd: Waiting')" = "openvassd: Waiting" ]; do - sleep 10 - echo "Waiting for OpenVAS-Scanner to become ready.." &>>/tmp/openvas_mail.out - done - echo "OpenVAS-Scanner is restarted." &>>/tmp/openvas_mail.out - - # Restart OpenVAS-Manager - if [ $manager -eq 0 ]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart openvasmd.service &>/dev/null - - if [ $? -eq 0 ]; then - success="0" - echo "systemd --> openvasmd.service is restarted" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Success!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "systemd --> openvasmd.service cannot restarted" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Failed!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$manager_service" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart "$manager_service" &>/dev/null - - if [ $? -eq 0 ]; then - success="0" - echo "systemd --> $manager_service is restarted" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Success!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "systemd --> $manager_service cannot restarted" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Failed!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$manager_init" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - rc-service openvasmd start &>/dev/null - - if [ $? -eq 0 ]; then - success="0" - echo "open-rc --> openvasmd is restarted" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Success!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "open-rc --> openvasmd cannot restarted" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Failed!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - else - ps aux | grep -v "grep" | grep -P "(^|\s)\Kopenvasmd(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - openvasmd "$OPENVAS_MANAGER_OPTIONS" "$OPENVAS_MANAGER_PORT" "$OPENVAS_MANAGER_LISTEN_ADDRESS" "$OPENVAS_MANAGER_SCANNER_HOST" "$OPENVAS_MANAGER_GNUTLS_PRIORITIES" &>/dev/null - - if [ $? -eq 0 ]; then - success="0" - echo "OpenVAS-Manager is restarted manually" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Success!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "OpenVAS-Manager cannot restarted" &>>/tmp/openvas_mail.out - echo "OpenVAS CronJob Failed!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - fi - else - echo "OpenVAS CronJob Failed! openvas-scanner cannot restarted" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - else - echo "OpenVAS CronJob Failed! OpenVAS NVT cache build failed" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - else - echo "OpenVAS CronJob Failed! OpenVAS Certdata sync failed!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - else - echo "OpenVAS CronJob Failed! OpenVAS Scapdata sync failed!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - else - echo "OpenVAS CronJob Failed! OpenVAS NVT sync update failed!" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null -fi -rm -rf /tmp/openvas_mail.out - -# Restart WebUI -if [[ -n "$success" ]] && [ $gsad -eq 0 ]; then - WHICHA="$(type gsad | awk '{print $3}')" - - if [ $assistant -eq 0 ]; then - # Time to restart OpenVAS-Security Assistant - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart gsad.service &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> gsad.service (OpenVAS WebUI) is restarted" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "systemd --> gsad.service (OpenVAS-WebUI) cannot restarted" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - - elif [[ -n "$assistant_service" ]]; then - if [ $COUNTA -eq 1 ]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - systemctl restart "$assistant_service" &>/dev/null - - if [ $? -eq 0 ]; then - echo "systemd --> $assistant_service (OpenVAS WebUI) is restarted" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "systemd --> $assistan_service (OpenVAS WebUI) cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - else - echo "systemd --> OpenVAS WebUI cannot restarted! You have multiple enabled systemd services ($assistant_service)" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - exit 1 - fi - - elif [[ -n "$assistant_init" ]]; then - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - rc-service gsad start &>/dev/null - - if [ $? -eq 0 ]; then - echo "open-rc --> gsad (OpenVAS WebUI) is restarted" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "open-rc --> gsad (OpenVAS WebUI) cannot restarted." | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - else - ps aux | grep -v "grep" | grep -P "(^|\s)\K$WHICHA(?=\s|$)" | awk '{print $2}' | xargs kill -9 &>/dev/null - sleep 5 - gsad "$OPENVAS_SECURITY_ASSISTANT_OPTIONS" "$OPENVAS_SECURITY_ASSISTANT_LISTEN_ADDRESS" "$OPENVAS_SECURITY_ASSISTANT_LISTEN_PORT" "$OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_ADDRESS" "$OPENVAS_SECURITY_ASSISTANT_MANAGER_LISTEN_PORT" "$OPENVAS_SECURITY_ASSISTANT_GNUTLS_PRIORITIES" &>/dev/null - - if [ $? -eq 0 ]; then - echo "OpenVAS WebUI is restarted" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - else - echo "OpenVAS WebUI cannot restarted" | tee -a /tmp/openvas_mail.out - echo -e "Subject:$MAIL_SUBJECT\n$(cat /tmp/openvas_mail.out)" | sendmail -t "$MAIL_TO" &>/dev/null - fi - fi - rm -rf /tmp/openvas_mail.out -fi diff --git a/net-analyzer/openvas-scanner/files/openvas-nvt-sync-cron b/net-analyzer/openvas-scanner/files/openvas-nvt-sync-cron deleted file mode 100644 index e6a83867f3d9..000000000000 --- a/net-analyzer/openvas-scanner/files/openvas-nvt-sync-cron +++ /dev/null @@ -1,39 +0,0 @@ -#!/bin/sh - -if [ -f /etc/openvas/openvassd.conf ]; then - . /etc/openvas/openvassd.conf -fi - -if [ "$auto_plugin_update" != "yes" ]; then - exit 0 -fi - -opts="" -case "$update_method" in - rsync) - opts = "$opts --rsync" - ;; - wget) - opts = "$opts --wget" - ;; - curl) - opts = "$opts --curl" - ;; -esac - -# Export openvas-nvt-sync's environment variables if they are defined -[ \! -z "$NVT_DIR" ] && export NVT_DIR -[ \! -z "$OV_RSYNC_FEED" ] && export OV_RSYNC_FEED -[ \! -z "$OV_HTTP_FEED" ] && export OV_HTTP_FEED - -/usr/sbin/openvas-nvt-sync $opts >& /dev/null - -if [ $? -ne 0 ]; then - echo "Error updating OpenVAS plugins. Please run openvas-nvt-sync manually." - exit 1 -fi - -if [ "$notify_openvas_scanner" == "yes" ]; then - /etc/init.d/openvas-scanner reloadplugins -fi - diff --git a/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-mkcertclient.patch b/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-mkcertclient.patch deleted file mode 100644 index 05e92728f182..000000000000 --- a/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-mkcertclient.patch +++ /dev/null @@ -1,29 +0,0 @@ -diff -ru openvas-scanner-4.0.1/CMakeLists.txt openvas-scanner-4.0.1.mkcert/CMakeLists.txt ---- openvas-scanner-4.0.1/CMakeLists.txt 2014-04-23 16:00:47.000000000 +0200 -+++ openvas-scanner-4.0.1.mkcert/CMakeLists.txt 2014-05-26 16:04:23.093548608 +0200 -@@ -258,7 +258,6 @@ - # DESTINATION ${OPENVAS_SYSCONF_DIR}) - - install (FILES ${CMAKE_BINARY_DIR}/tools/openvas-mkcert -- ${CMAKE_BINARY_DIR}/tools/openvas-mkcert-client - ${CMAKE_BINARY_DIR}/tools/openvas-nvt-sync - DESTINATION ${SBINDIR} - PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE -@@ -269,7 +268,15 @@ - PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE - GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) - --install (FILES ${CMAKE_BINARY_DIR}/doc/openvassd.8 -+install (FILES ${CMAKE_BINARY_DIR}/tools/openvas-mkcert-client -+ DESTINATION ${BINDIR} -+ PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE -+ GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) -+ -+install (FILES ${CMAKE_SOURCE_DIR}/doc/openvas-mkcert-client.1 -+ DESTINATION ${DATADIR}/man/man1 ) -+ -+install (FILES ${CMAKE_BINARY_DIR}/doc/openvassd.8 - DESTINATION ${DATADIR}/man/man8 ) - - install (FILES ${CMAKE_SOURCE_DIR}/doc/openvas-mkcert.8 -Only in openvas-scanner-4.0.1.mkcert/: CMakeLists.txt~ diff --git a/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-rulesdir.patch b/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-rulesdir.patch deleted file mode 100644 index 90f998ffd40c..000000000000 --- a/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-rulesdir.patch +++ /dev/null @@ -1,15 +0,0 @@ -diff -ru openvas-scanner-4.0.1/CMakeLists.txt openvas-scanner-4.0.1.rules/CMakeLists.txt ---- openvas-scanner-4.0.1/CMakeLists.txt 2014-04-23 16:00:47.000000000 +0200 -+++ openvas-scanner-4.0.1.rules/CMakeLists.txt 2014-05-26 16:07:37.454116277 +0200 -@@ -171,6 +171,10 @@ - set (OPENVASSD_DEBUGMSG "${OPENVAS_LOG_DIR}/openvassd.dump") - set (OPENVASSD_CONF "${OPENVAS_SYSCONF_DIR}/openvassd.conf") - -+if (NOT OPENVASSD_RULES) -+ set (OPENVASSD_RULES "${OPENVAS_DATA_DIR}/openvassd.rules") -+endif (NOT OPENVASSD_RULES) -+ - set (NVT_TIMEOUT "320") - - message ("-- Install prefix: ${CMAKE_INSTALL_PREFIX}") - diff --git a/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-run.patch b/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-run.patch deleted file mode 100644 index 51dd8389c5f5..000000000000 --- a/net-analyzer/openvas-scanner/files/openvas-scanner-4.0.3-run.patch +++ /dev/null @@ -1,17 +0,0 @@ - CMakeLists.txt | 2 +- - tools/greenbone-nvt-sync | 2 +- - 2 files changed, 2 insertions(+), 2 deletions(-) - -diff --git a/CMakeLists.txt b/CMakeLists.txt -index c691100..d78ffa6 100644 ---- a/CMakeLists.txt -+++ b/CMakeLists.txt -@@ -155,7 +155,7 @@ set (OPENVAS_DATA_DIR "${DATADIR}/openvas") - set (OPENVAS_STATE_DIR "${LOCALSTATEDIR}/lib/openvas") - set (OPENVAS_LOG_DIR "${LOCALSTATEDIR}/log/openvas") - set (OPENVAS_CACHE_DIR "${LOCALSTATEDIR}/cache/openvas") --set (OPENVAS_PID_DIR "${LOCALSTATEDIR}/run") -+set (OPENVAS_PID_DIR "/run") - set (OPENVAS_SYSCONF_DIR "${SYSCONFDIR}/openvas") - - set (OPENVAS_NVT_DIR "${OPENVAS_STATE_DIR}/plugins") diff --git a/net-analyzer/openvas-scanner/files/openvassd b/net-analyzer/openvas-scanner/files/openvassd deleted file mode 100644 index 13070e32e1cc..000000000000 --- a/net-analyzer/openvas-scanner/files/openvassd +++ /dev/null @@ -1,22 +0,0 @@ -#!/sbin/openrc-run -# Copyright 1999-2011 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 - -depend() { - need net -} - -start() { - ebegin "Starting openvassd (scanner)" - start-stop-daemon --start --name openvassd \ - --exec /usr/sbin/openvassd \ - --pidfile /var/run/openvassd.pid - eend $? -} - -stop() { - ebegin "Stop openvassd (scanner)" - start-stop-daemon --stop --name openvassd \ - --pidfile /var/run/openvassd.pid - eend $? -} diff --git a/net-analyzer/openvas-scanner/files/openvassd-daemon.conf b/net-analyzer/openvas-scanner/files/openvassd-daemon.conf deleted file mode 100644 index 628a223a4198..000000000000 --- a/net-analyzer/openvas-scanner/files/openvassd-daemon.conf +++ /dev/null @@ -1,26 +0,0 @@ -#Listen on given address - by default scanner listens on all addresses -#SCANNER_LISTEN=--listen=127.0.0.1 - -#Listen on given port - by default 9391 -SCANNER_PORT=--port=9391 - -#Send the packets with the source IP of IP1,IP2,IP3.... -#SCANNER_SRCIP=--src-ip=127.0.0.1,192.168.1.2 - -# Extra Arguments -# SCANNER_EXTRA_ARGS="" - -# Set to yes if plugins should be automatically updated via a cron job -auto_plugin_update=no - -# Notify OpenVAS scanner after update by seding it SIGHUP? -notify_openvas_scanner=yes - -# Method to use to get updates. The default is via rsync -# Note that only wget and curl support retrieval via proxy -# update_method=rsync|wget|curl - -# Additionaly, you can specify the following variables -#NVT_DIR where to extract plugins (absolute path) -#OV_RSYNC_FEED URL of rsync feed -#OV_HTTP_FEED URL of http feed diff --git a/net-analyzer/openvas-scanner/files/openvassd.init b/net-analyzer/openvas-scanner/files/openvassd.init deleted file mode 100644 index c07d3936905d..000000000000 --- a/net-analyzer/openvas-scanner/files/openvassd.init +++ /dev/null @@ -1,25 +0,0 @@ -#!/sbin/openrc-run -# Copyright 1999-2014 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 - -name="OpenVAS Scanner" -command="/usr/sbin/openvassd" -command_args="${SCANNER_LISTEN} ${SCANNER_PORT} ${SCANNER_SRCIP} ${SCANNER_EXTRA_ARGS}" -pidfile="/run/openvassd.pid" -extra_stopped_commands="create_cache" - -depend() { - after bootmisc - need localmount net -} - -start_pre() { - checkpath --directory --mode 0775 --quiet /var/cache/openvas -} - -create_cache() { - checkpath --directory --mode 0775 --quiet /var/cache/openvas - ebegin "Generating initial Cache" - /usr/sbin/openvassd --foreground --only-cache - eend $? -} diff --git a/net-analyzer/openvas-scanner/files/openvassd.logrotate b/net-analyzer/openvas-scanner/files/openvassd.logrotate deleted file mode 100644 index 9316ba8d9629..000000000000 --- a/net-analyzer/openvas-scanner/files/openvassd.logrotate +++ /dev/null @@ -1,11 +0,0 @@ -# logrotate for openvas -/var/log/openvas/openvassd.log { - rotate 4 - weekly - compress - delaycompress - missingok - postrotate - /bin/kill -HUP `pidof openvassd` - endscript -} diff --git a/net-analyzer/openvas-scanner/files/openvassd.service b/net-analyzer/openvas-scanner/files/openvassd.service deleted file mode 100644 index 553b09b5b2fb..000000000000 --- a/net-analyzer/openvas-scanner/files/openvassd.service +++ /dev/null @@ -1,16 +0,0 @@ -[Unit] -Description=OpenVAS Scanner -After=network.target -Before=openvasmd.service - -[Service] -EnvironmentFile=-/etc/openvas/openvassd-daemon.conf -ExecStart=/usr/sbin/openvassd -f ${SCANNER_PORT} ${SCANNER_LISTEN} ${SCANNER_SRCIP} ${SCANNER_EXTRA_ARGS} -Restart=always -RestartSec=1 -User=root -Group=root -TimeoutSec=1200 - -[Install] -WantedBy=multi-user.target diff --git a/net-analyzer/openvas-scanner/files/openvassd.tmpfiles.d b/net-analyzer/openvas-scanner/files/openvassd.tmpfiles.d deleted file mode 100644 index 18e820caec1b..000000000000 --- a/net-analyzer/openvas-scanner/files/openvassd.tmpfiles.d +++ /dev/null @@ -1 +0,0 @@ -d /var/cache/openvassd 0775 diff --git a/net-analyzer/openvas-scanner/openvas-scanner-5.0.4-r1.ebuild b/net-analyzer/openvas-scanner/openvas-scanner-5.0.4-r1.ebuild deleted file mode 100644 index ac7d2ea314e2..000000000000 --- a/net-analyzer/openvas-scanner/openvas-scanner-5.0.4-r1.ebuild +++ /dev/null @@ -1,72 +0,0 @@ -# Copyright 1999-2018 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -DL_ID=2129 -MY_PN=openvassd -inherit cmake-utils systemd - -DESCRIPTION="A remote security scanner for Linux (OpenVAS-scanner)" -HOMEPAGE="http://www.openvas.org/" -SRC_URI="http://wald.intevation.org/frs/download.php/${DL_ID}/${P/_beta/+beta}.tar.gz" - -SLOT="0" -LICENSE="GPL-2" -KEYWORDS="~amd64 ~arm ~ppc ~x86" -IUSE="" - -DEPEND=" - app-crypt/gpgme - >=dev-libs/glib-2.16:2 - dev-libs/libgcrypt:0 - >=net-analyzer/openvas-libraries-8.0.2 -" -RDEPEND="${DEPEND} - !net-analyzer/openvas-plugins - !net-analyzer/openvas-server -" -BDEPEND=" - virtual/pkgconfig -" - -S="${WORKDIR}"/${P/_beta/+beta} - -PATCHES=( - "${FILESDIR}"/${PN}-4.0.3-mkcertclient.patch - "${FILESDIR}"/${PN}-4.0.3-rulesdir.patch - "${FILESDIR}"/${PN}-4.0.3-run.patch -) - -src_prepare() { - cmake-utils_src_prepare - sed \ - -e '/^install.*OPENVAS_CACHE_DIR.*/d' \ - -i CMakeLists.txt || die -} - -src_configure() { - local mycmakeargs=( - -DLOCALSTATEDIR="${EPREFIX}/var" - -DSYSCONFDIR="${EPREFIX}/etc" - ) - cmake-utils_src_configure -} - -src_install() { - cmake-utils_src_install - - newinitd "${FILESDIR}"/${MY_PN}.init ${MY_PN} - - insinto /etc/openvas - doins "${FILESDIR}"/${MY_PN}.conf "${FILESDIR}"/${MY_PN}-daemon.conf - dosym ../openvas/${MY_PN}-daemon.conf /etc/conf.d/${MY_PN} - - insinto /etc/logrotate.d - doins "${FILESDIR}"/${MY_PN}.logrotate - - dodoc "${FILESDIR}"/openvas-nvt-sync-cron - - systemd_newtmpfilesd "${FILESDIR}"/${MY_PN}.tmpfiles.d ${MY_PN}.conf - systemd_dounit "${FILESDIR}"/${MY_PN}.service -} diff --git a/net-analyzer/openvas-scanner/openvas-scanner-5.1.3.ebuild b/net-analyzer/openvas-scanner/openvas-scanner-5.1.3.ebuild index c0e59479a726..ece8f93f9010 100644 --- a/net-analyzer/openvas-scanner/openvas-scanner-5.1.3.ebuild +++ b/net-analyzer/openvas-scanner/openvas-scanner-5.1.3.ebuild @@ -80,10 +80,6 @@ src_install() { insinto /etc/openvas/sysconfig doins "${FILESDIR}"/${MY_PN}-daemon.conf - insinto /etc/openvas/scripts - doins "${FILESDIR}"/openvas-feed-sync "${FILESDIR}"/first-start - fperms 0755 /etc/openvas/scripts/{openvas-feed-sync,first-start} - newinitd "${FILESDIR}/${MY_PN}.init" ${MY_PN} newconfd "${FILESDIR}/${MY_PN}-daemon.conf" ${MY_PN} |