diff options
Diffstat (limited to 'net-analyzer')
57 files changed, 1397 insertions, 8 deletions
diff --git a/net-analyzer/Manifest.gz b/net-analyzer/Manifest.gz Binary files differindex 61245b9f75e2..db6950fafda2 100644 --- a/net-analyzer/Manifest.gz +++ b/net-analyzer/Manifest.gz diff --git a/net-analyzer/greenbone-feed-sync/Manifest b/net-analyzer/greenbone-feed-sync/Manifest new file mode 100644 index 000000000000..ce526d264f44 --- /dev/null +++ b/net-analyzer/greenbone-feed-sync/Manifest @@ -0,0 +1,6 @@ +AUX greenbone-feed-sync.cron 222 BLAKE2B b4ebc765c293fbc8445c7506c882f67879cc64a75debda93d31e66fc270d8bf6457d9dca008582b81ac43629799f4d77ffe53fe4c08acfa26087665994ac8baf SHA512 ae3f3187fbe6a664a490b2a3ff6738869e97eb7eff324eba215569fde676d5a53d846cc86ce36a42929ea85d1d8cec88f3a9fe45f264446ae54baab727800391 +AUX greenbone-feed-sync.service 219 BLAKE2B 7f5d17b23b56a175115a4147e16d1e8636c961aaf40b24671d3a2e55701eb8bfd493dbda686fb9e56675fc6ac5c731721d53da2446cbcb1dbc6bf9ef279f44fe SHA512 0c2dce6ff3fd1837c69ee0899c2b1da98f8c7877fb140677ce4ff8c10cd140e7f3581008f26bdb119a3bf41f7f2a40fb2082d84060c830417faf4e4ed72dbb98 +AUX greenbone-feed-sync.timer 183 BLAKE2B f91b69c6b2a5024c6cd9d678676071f7d5e175a3b35e0e34ffc03be7630df7519948c6c3285c7b265c73c0b7b4485706bba5673f89234c478ad6cd43d7305ddc SHA512 3716c8057bab3926b57e5e9868f4e00ec95940e5a9ea0506e16a152a76cb9b388ba5f0c8404245dcba5ba26bc789f0670781c41568d53a82412cd19689aca2c6 +DIST greenbone-feed-sync-23.6.0.tar.gz 65420 BLAKE2B f5f30867ff47f10832b175de1c04136d9b42d7662f679f1f87d00684aacde575093a7c199566c04959faa8b26373d4b3e64cc6e7afaf6bca0f80aab095b0d40f SHA512 20427f183ef2c278c96d39ff9ad82e8cbadae12fb2ef4518186993b67dd4c0f5de4a11f375684154daa530c8807dfda07d654a15e580f7886fcedf285531829d +EBUILD greenbone-feed-sync-23.6.0.ebuild 1491 BLAKE2B 112b57a7d13e3bd1b6932155d7768564f62aad17960707a750e722058ba88f9c387c4d2a54cc661dc0a5ceec5f46ae3728a252ecddd7c802dcb209cfb31cc70e SHA512 156913f07bc86f427ff50e978ac80b67ddbdf87a3a2358e6ab851042892de4dcf6366471d296557260f1cf4eeb8fb3ec73d6285773cc7aa9141129cab09bc324 +MISC metadata.xml 822 BLAKE2B 6e48caf48d652d7892292654b2b55a1b200fedae3b34d03ed237259fda8a8c8013cda2c3ac93b080658424a21a13e9a3d4eb92c677621c17c2309cf7f7467c32 SHA512 9457919c66737a70c7cc58aa576102c46c1d296a616baf53559eb04bd89a7cc315d59980e7150afea1f9010344952e73deeb215ec5f776075b638072badf5983 diff --git a/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.cron b/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.cron new file mode 100644 index 000000000000..5b3755982966 --- /dev/null +++ b/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.cron @@ -0,0 +1,7 @@ +#!/bin/sh +# +# To enable sync via cron, execute "sudo -u gvm touch /etc/gvm/cron-feed-sync-enabled" +if [[ ! -f /etc/gvm/cron-feed-sync-enabled ]]; then + exit +fi +sudo -u gvm /usr/bin/greenbone-feed-sync --quiet --type all diff --git a/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.service b/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.service new file mode 100644 index 000000000000..987fe731d47b --- /dev/null +++ b/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.service @@ -0,0 +1,11 @@ +[Unit] +Description=sync the Greenbone Community Feed + +[Service] +Type=oneshot +ExecStart=/usr/bin/greenbone-feed-sync --quiet --type all +SyslogIdentifier=greenbone-feed-sync +User=gvm + +[Install] +WantedBy=multi-user.target diff --git a/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.timer b/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.timer new file mode 100644 index 000000000000..9faf470e013c --- /dev/null +++ b/net-analyzer/greenbone-feed-sync/files/greenbone-feed-sync.timer @@ -0,0 +1,9 @@ +[Unit] +Description=Daily update of all feeds of the Greenbone Vulerability Management (GMV) suite + +[Timer] +OnCalendar=daily +RandomizedDelaySec=2hour + +[Install] +WantedBy=timers.target diff --git a/net-analyzer/greenbone-feed-sync/greenbone-feed-sync-23.6.0.ebuild b/net-analyzer/greenbone-feed-sync/greenbone-feed-sync-23.6.0.ebuild new file mode 100644 index 000000000000..dbbef48f42a7 --- /dev/null +++ b/net-analyzer/greenbone-feed-sync/greenbone-feed-sync-23.6.0.ebuild @@ -0,0 +1,67 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{9..11} ) +DISTUTILS_USE_PEP517=poetry +inherit distutils-r1 systemd + +DESCRIPTION="New script for syncing the Greenbone Community Feed" +HOMEPAGE="https://github.com/greenbone/greenbone-feed-sync" +SRC_URI="https://github.com/greenbone/greenbone-feed-sync/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="GPL-3+" +KEYWORDS="~amd64 ~x86" +IUSE="cron" +RESTRICT="test" + +DEPEND=" + acct-user/gvm + net-misc/rsync + >=net-analyzer/gvmd-22.5.0 + dev-python/tomli[${PYTHON_USEDEP}] + dev-python/rich[${PYTHON_USEDEP}] +" + +RDEPEND=" + ${DEPEND} + cron? ( virtual/cron ) +" + +python_install() { + distutils-r1_python_install + + #greenbone-feed-sync should not be run as root to avoid changing file permissions + insinto /etc/sudoers.d + newins - greenbone-feed-sync <<-EOF + gvm ALL = NOPASSWD: /usr/bin/greenbone-feed-sync +EOF + + if use cron; then + exeinto /etc/cron.daily + newexe "${FILESDIR}"/${PN}.cron ${PN} + fi + + systemd_dounit "${FILESDIR}/${PN}.timer" "${FILESDIR}/${PN}.service" +} + +pkg_postinst() { + if [[ -n ${REPLACING_VERSIONS} ]]; then + return + fi + + if use cron; then + elog + elog "Edit ${EROOT}/etc/cron.weekly/greenbone-feed-sync to activate daily feed update!" + elog + fi + + if systemd_is_booted; then + elog + elog "To enable the systemd timer, run the following command:" + elog " systemctl enable --now greenbone-feed-sync.timer" + elog + fi +} diff --git a/net-analyzer/greenbone-feed-sync/metadata.xml b/net-analyzer/greenbone-feed-sync/metadata.xml new file mode 100644 index 000000000000..7f358764088e --- /dev/null +++ b/net-analyzer/greenbone-feed-sync/metadata.xml @@ -0,0 +1,22 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> +<pkgmetadata> + <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="project" proxied="proxy"> + <email>proxy-maint@gentoo.org</email> + <name>Proxy Maintainers</name> + </maintainer> + <use> + <flag name="cron">Adds file to enable daily cron job to update Greenbone Community Feed's data"</flag> + </use> + <longdescription lang="en"> + This is the new script for syncing the Greenbone Community Feed. + The greenbone-nvt-sync script was previously installed by net-analyzer/openvas-scanner. + </longdescription> + <upstream> + <remote-id type="github">greenbone/greenbone-feed-sync</remote-id> + </upstream> +</pkgmetadata> diff --git a/net-analyzer/gsa/Manifest b/net-analyzer/gsa/Manifest index a90c1b5654d5..72e16abbe50e 100644 --- a/net-analyzer/gsa/Manifest +++ b/net-analyzer/gsa/Manifest @@ -1,4 +1,7 @@ DIST gsa-21.4.2-node_modules.tar.gz 86572528 BLAKE2B 1aec3d8636241d7cd4ca591133cdadd26d349bf4342ee1595a678871617b4b3a763348a7a0e6d44b50780f330362131d7ba72953a40f53e79b1f9709775999fb SHA512 c44f3822864b9f68cbfe0e4052b2295ab74cb2c429cd9aa667b19b8cfb423c49dc65b1455f785abecdc4329f31b43fe368b0bd5276b4ad95d5fa2e208bb4a4ec DIST gsa-21.4.4.tar.gz 2471442 BLAKE2B b3ac937a87038d93e90223f7c33d087b0dbb043c4fcaa8a00c9d44148e686c064fdcc311899b7b3b4084658d23193bc128fb809f22621583898551f4348ece6f SHA512 5a7b45132a049adf608ccd8988d69a415290cc57d6e7537835a78e19aafb5dfdf204197576f69277726587efaccce189c1ccab55c43e5a0a7855c538b3bc4b67 +DIST gsa-22.5.0-node_modules.tar.xz 26394052 BLAKE2B 77e74ccacecd681e846884af463ee0605eb46c21dd0cd001f3240d4cfd97b91d3ce241bda50996e3ec047824e937383f8c80e0b8014b93bf3d6d067a9afec929 SHA512 221dde765497e6c97773d18b04b3d381b2f003c42995e935661ac7e35c9b18984a92336259d803174ad62387a5d653df12c0899c495334561f71df6d4290f0c8 +DIST gsa-22.5.0.tar.gz 3586703 BLAKE2B 33d9f5e32ccc33e4c1d24665bd7ba0819dc22281772c7ebba24d8c82f93bcc21e8b90f3e0666b9ed8846e2a88417f8bf5999619577c15c307485a7ce3243d104 SHA512 2f119f3d8b213cb10abc7b2a25052e943518f8a2c5950f6eb6e5227bf30f7467ddbcf78bbed5f499b96a0bb517c5033f38477f332a14f449b7b04e7b7902843b EBUILD gsa-21.4.4.ebuild 1036 BLAKE2B 9b929e395348dd2ab4eb93a377d23feb32689be41a95df04bde261860081f981349f122256e9f1133e277ed5b9c2e995100ee2e8c5cb4e692f4333877bb3b6d7 SHA512 9fe0def0a89ad904eeb9fe729e4a260ce186e6de1ef1f8cba36700b14bad32c2d37bb8f0f6d857146700dd84dce15747033cec93649b7bbdb3582e7da5be796e +EBUILD gsa-22.5.0.ebuild 956 BLAKE2B 0a017a612b32c0c8e5fe824b89ba85fda0a4b6cf9a8be83f526ae1b416b86fe690aa1284c39ba00956c99e7c23d89f40331f3388cb7be6744bb2deeb10c151d5 SHA512 aff75c354d203856cb3ff84a66a3eccf9418aab7af7b4b0a2aa61da7fc52da6dd3353fe0caf96eccd22e0547515edd747448ba1d51cb09eb0544f6cf68af3a87 MISC metadata.xml 844 BLAKE2B c354d74c6109f19e9abb07a434af70de3d1dc78603a47b36fcfad8a52125a372a02be4069458ebafdfd602200f8cf39a46e1acbffa44b7c270b35f61c4102fe6 SHA512 10a27dd22f1db595c1bd933694ff96bdd28cf3229f4676ea88ea7055da0087c9e1ddc0e0fc46ac5e3eebd1f31f58ec7f00a24bcac9569ef76663eb44fe0e3751 diff --git a/net-analyzer/gsa/gsa-22.5.0.ebuild b/net-analyzer/gsa/gsa-22.5.0.ebuild new file mode 100644 index 000000000000..e25fbab90bcd --- /dev/null +++ b/net-analyzer/gsa/gsa-22.5.0.ebuild @@ -0,0 +1,42 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +MY_NODE_N="node_modules" +MY_NODE_PV="${PV}" + +DESCRIPTION="Greenbone Security Assistant" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/gsa" +SRC_URI=" + https://github.com/greenbone/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz + https://dev.gentoo.org/~flow/distfiles/${PN}/${P}-${MY_NODE_N}.tar.xz +" + +SLOT="0" +LICENSE="AGPL-3+" +KEYWORDS="~amd64 ~x86" + +BDEPEND=" + >=net-libs/nodejs-14.0.0[ssl] + >=sys-apps/yarn-1.15.2 +" + +MY_NODE_DIR="${S}/${MY_NODE_N}/" + +src_prepare() { + default + # We will use pre-generated npm stuff. + mv "${WORKDIR}/${MY_NODE_N}" "${MY_NODE_DIR}" || die "couldn't move node_modules" +} + +src_compile() { + # setting correct PATH for finding react-js + NODE_ENV=production PATH="${PATH}:${MY_NODE_DIR}/.bin/" \ + yarn --offline build || die +} + +src_install() { + insinto "usr/share/gvm/gsad/web" + doins -r build/* +} diff --git a/net-analyzer/gsad/Manifest b/net-analyzer/gsad/Manifest index b427d0046904..19dec242a6ce 100644 --- a/net-analyzer/gsad/Manifest +++ b/net-analyzer/gsad/Manifest @@ -1,5 +1,11 @@ +AUX gsad-22.init 654 BLAKE2B 337f2d7a4899954abb923a7c41f58315ddb51e76cbfec7c55493039497e26ebe36e60fbcebad35e04f00a66fdeaa952e386fcb4847f61ce3fd49a0e32c03ecdd SHA512 b878fcc6d1eb17a41d2dcd6db53c165a5d848d2e22b79c2f5864adb90e4843287c00b6dd5db7a7344b69c154be92ba8b3354b5bde03e943e3b8ad7b08e048a8f AUX gsad-daemon.conf 416 BLAKE2B 7c6dff183ceb8afdbe7abb75333fb8aa570be406ecb18641e96d8045d793b6ef81b46acbfd243c4bb9a4bcb98cb6c039ebd0793c13855b7f5404e552a6088ef5 SHA512 7e696a3bb61310d7e8c553ed3744adb5fd60a75c83c0b9f99c76c092f78b4cf25d8b9c72b10d4a79ed501da16a27b8beddcda36f48acb550dfa01dbc19379f68 AUX gsad.init 601 BLAKE2B 79b76f512904c55f235cc6ac1b3513f920dee9cbaaa06c115c93f7abb215302f544a8e021fe0e7a66f0d646807da75a3fc4ed68cf01e00eaaa003b1ff39c1c9e SHA512 610db173cf45de0ff907dacfabba0b6e03c6a83fda97f3b76d253a80e2353961f9ac61bfd9131561e34339075556d4930273dadef94d8f9e2f8f30f50266e44d +AUX gsad.service.conf 25 BLAKE2B fb1972cc41f5f8970717136ef71c81b74cb1abb6c0419d3c8f7f51a9f54f933eb1c1551cfb56149bc7b5e2c68dd11d731b556a7ba2da678b02f24cf143810b4f SHA512 ece2d5838f743a820dd732a5e5b17d91e85ce07655173a0143740ef6bcd20156d6aebfcf8c43d53caa7713402607d88acc0328499326f6921e3b057bd0ef9d66 DIST gsad-21.4.4.tar.gz 220618 BLAKE2B 276164ce1e03a6ed211d3bdf24c7f9b5ac832c07891b34b467f61ec02c5670d5368ea3219b3cc445e4ef83fef0aee7375c89ce8008746ea7e08abf50da8fb9fd SHA512 092c8187754b3f0503e4ae6fd9c41dbd6917264668a5f8f831d40e88c7b8db6772acd354db62ac66b4af13b7c27e78516d4975f5bfede0d28001007a46c39f75 +DIST gsad-22.4.1.tar.gz 224061 BLAKE2B 2357d8eac221c934509ed2c4e47d3e16ac392d11212320152bc1d247be2b8eb1275fbaffbb6c71568dac45b41e6380242c8b3afce46e8ee97aad7be8d24544ba SHA512 7f957fcdc842b81aaf69858f98f1edd8a808eb70d2e0bd86413d6a9dfe053e10b6ed2f4e2cadcc023fd580d96d624c007e8701133fb3fea2e072ce26f9a64ed4 +DIST gsad-22.5.1.tar.gz 223290 BLAKE2B 24530f085c644895d5153929038d040fbcb0626b4b2df0ce3966d96fc8c756fbb2b78540b2a57affab2f2eb97cf868f09b7ac863f9a314cb1f74a829fbea48cc SHA512 52ec1377d57d90f64e949472f5f6d1f94e9cdce86d7a807451ed9f01ff36e392606d725461e416246b9e706f00aa536cbc5672fb977695b20d0c5957b67447aa EBUILD gsad-21.4.4.ebuild 2329 BLAKE2B 35f607bb6ca44b9a42ad60bcda84c825251453a77ef146147b0f551f6b04968cc4a38c9a3f566bd0539436761ce6ed072b5b925e98f9db74faa0698c80ff1094 SHA512 4084d98b9893a037512fc0233a908ee1ec7afbe43f1e700a45627f40291da44b17f627ea731623ab1500e4f72ab31b4b5f846d84751185dbfde82c8f946fdcea -MISC metadata.xml 475 BLAKE2B ceecec65052a8fb73f81718cd6ee3e9fbbc476abb5e2264d14b354aa7d1225921522d081e76760f78f82b626ae6b860a14cf3594cf7c35e2c2fad3eec1be450b SHA512 e1a52a2958d265c0738d0026e6791a9b928caab2e535853c127f28dccc8b2ea74de578bd216577576683b507d27ab9661262d6a56cd06cc2761caac70fed7413 +EBUILD gsad-22.4.1.ebuild 2411 BLAKE2B d5a163ed28661b0e1cd5ef60ef244cabe94461f242ffae9ad2a1605edba1368bfc3c6b09cdc863301d4d13fb99ed79f253d616d5e55485410cede7dadddd7974 SHA512 d167382e05a792db3612fbdbbb84ea95ee70966887a015f8f2a1f6a4557015b91014aa4f2267651de85289deb6182b1ca586b7f131e35968d9b1469fcbcf56d0 +EBUILD gsad-22.5.1.ebuild 2412 BLAKE2B 16449534b1449749dd4679cc52431fc1f8428a6d662dd6ea356e102552621a1d6948f16f36264c0cd54316c6cb086b840b956a9d3cbdec8dc39695e13039d5d3 SHA512 25d89ffbac8e81a76d06511ba40212656eddeb5342843df13757a45bfdfed09e4e45de34f67b53671dbd8d686eae3dac156511e00ae3f45216b583c5d3d84197 +MISC metadata.xml 602 BLAKE2B d3c36459de572672fec6a1cd7d7c29c5b8be3a421455c8702a2bfbcf4d969c5783d5026024bbffe4b765a18b50852b534b9d2a1174f5586327ff13a4f704781f SHA512 e15e39148d80f4b6c8c6e14c18ae977d6ebcec98b201e4d9b58d83f4a183023f383d4c5ae986064b6a176b741d0ac923173cb4f78a30185ce341c642002e13d7 diff --git a/net-analyzer/gsad/files/gsad-22.init b/net-analyzer/gsad/files/gsad-22.init new file mode 100644 index 000000000000..9a93713bd591 --- /dev/null +++ b/net-analyzer/gsad/files/gsad-22.init @@ -0,0 +1,24 @@ +#!/sbin/openrc-run +# Copyright 1999-2022 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +: ${GSAD_USER:=gvm} +: ${GSAD_GROUP:=$(id -ng ${GSAD_USER})} +: ${GSAD_TIMEOUT:=30} + +name="Greenbone Security Assistant (GSA)" +command="/usr/bin/gsad" +command_args="--foreground ${GSAD_OPTIONS} ${GSAD_LISTEN_ADDRESS} ${GSAD_LISTEN_PORT} ${GVMD_LISTEN_ADDRESS} ${GVMD_LISTEN_PORT} ${GSAD_GNUTLS_PRIORITIES}" +command_background="true" +command_user="${GSAD_USER}:${GSAD_GROUP}" +pidfile="/run/gsad/gsad.pid" +retry="${GSAD_TIMEOUT}" + +depend() { + after bootmisc + need localmount net gvmd +} + +start_pre() { + checkpath -d /run/gsad +} diff --git a/net-analyzer/gsad/files/gsad.service.conf b/net-analyzer/gsad/files/gsad.service.conf new file mode 100644 index 000000000000..23d1db6f96bc --- /dev/null +++ b/net-analyzer/gsad/files/gsad.service.conf @@ -0,0 +1,2 @@ +[Unit] +PartOf=gvm.target diff --git a/net-analyzer/gsad/gsad-22.4.1.ebuild b/net-analyzer/gsad/gsad-22.4.1.ebuild new file mode 100644 index 000000000000..65d92e560f05 --- /dev/null +++ b/net-analyzer/gsad/gsad-22.4.1.ebuild @@ -0,0 +1,104 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit cmake systemd toolchain-funcs +# +DESCRIPTION="Greenbone Security Assistant" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/gsad" +SRC_URI="https://github.com/greenbone/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="AGPL-3+" +KEYWORDS="~amd64 ~x86" +IUSE="doc" + +DEPEND=" + acct-user/gvm + dev-libs/glib:2 + dev-libs/libgcrypt:0= + dev-libs/libxml2 + dev-libs/libxslt + >=net-analyzer/gvm-libs-${PV} + net-libs/gnutls:= + net-libs/libmicrohttpd:= +" +RDEPEND=" + ${DEPEND} + >=net-analyzer/gvmd-${PV} + >=net-analyzer/gsa-${PV} + net-analyzer/ospd-openvas +" +BDEPEND=" + dev-python/polib + virtual/pkgconfig + doc? ( + app-doc/doxygen[dot] + app-doc/xmltoman + app-text/htmldoc + sys-devel/gettext + ) +" + +src_prepare() { + cmake_src_prepare + + # QA-Fix | Remove !CLANG doxygen warnings for 9.0.0 + if use doc; then + if ! tc-is-clang; then + local f + for f in doc/*.in + do + sed -i \ + -e "s*CLANG_ASSISTED_PARSING = NO*#CLANG_ASSISTED_PARSING = NO*g" \ + -e "s*CLANG_OPTIONS*#CLANG_OPTIONS*g" \ + "${f}" || die "couldn't disable CLANG parsing" + done + fi + fi + + # Do not install the empty /run/gsad run dir. https://github.com/greenbone/gsad/pull/54 + sed -i "/^install.*GSAD_RUN_DIR/d" CMakeLists.txt || die + + # Drop Group= directive. https://github.com/greenbone/gsad/pull/55 + sed -i "/^Group=/d" config/gsad.service.in || die +} + +src_configure() { + local mycmakeargs=( + "-DLOCALSTATEDIR=${EPREFIX}/var" + "-DSYSCONFDIR=${EPREFIX}/etc" + "-DSBINDIR=${EPREFIX}/usr/bin" + "-DGSAD_PID_DIR=/run/gsad" + "-DSYSTEMD_SERVICE_DIR=$(systemd_get_systemunitdir)" + "-DLOGROTATE_DIR=${EPREFIX}/etc/logrotate.d" + ) + cmake_src_configure +} + +src_compile() { + # setting correct PATH for finding react-js + NODE_ENV=production PATH="$PATH:${S}/gsa/node_modules/.bin/" cmake_src_compile + if use doc; then + cmake_build -C "${BUILD_DIR}" doc + cmake_build doc-full -C "${BUILD_DIR}" doc + fi + cmake_build rebuild_cache +} + +src_install() { + if use doc; then + local HTML_DOCS=( "${BUILD_DIR}/doc/generated/html/." ) + fi + cmake_src_install + + systemd_install_serviced "${FILESDIR}/gsad.service.conf" \ + ${PN}.service + + insinto /etc/gvm/sysconfig + doins "${FILESDIR}/${PN}-daemon.conf" + + newinitd "${FILESDIR}/${PN}-22.init" "${PN}" + newconfd "${FILESDIR}/${PN}-daemon.conf" "${PN}" +} diff --git a/net-analyzer/gsad/gsad-22.5.1.ebuild b/net-analyzer/gsad/gsad-22.5.1.ebuild new file mode 100644 index 000000000000..00b93d2f84e0 --- /dev/null +++ b/net-analyzer/gsad/gsad-22.5.1.ebuild @@ -0,0 +1,104 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit cmake systemd toolchain-funcs +# +DESCRIPTION="Greenbone Security Assistant" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/gsad" +SRC_URI="https://github.com/greenbone/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="AGPL-3+" +KEYWORDS="~amd64 ~x86" +IUSE="doc" + +DEPEND=" + acct-user/gvm + dev-libs/glib:2 + dev-libs/libgcrypt:0= + dev-libs/libxml2 + dev-libs/libxslt + >=net-analyzer/gvm-libs-${PV} + net-libs/gnutls:= + net-libs/libmicrohttpd:= +" +RDEPEND=" + ${DEPEND} + >=net-analyzer/gvmd-${PV} + >=net-analyzer/gsa-22.5.0 + net-analyzer/ospd-openvas +" +BDEPEND=" + dev-python/polib + virtual/pkgconfig + doc? ( + app-doc/doxygen[dot] + app-doc/xmltoman + app-text/htmldoc + sys-devel/gettext + ) +" + +src_prepare() { + cmake_src_prepare + + # QA-Fix | Remove !CLANG doxygen warnings for 9.0.0 + if use doc; then + if ! tc-is-clang; then + local f + for f in doc/*.in + do + sed -i \ + -e "s*CLANG_ASSISTED_PARSING = NO*#CLANG_ASSISTED_PARSING = NO*g" \ + -e "s*CLANG_OPTIONS*#CLANG_OPTIONS*g" \ + "${f}" || die "couldn't disable CLANG parsing" + done + fi + fi + + # Do not install the empty /run/gsad run dir. https://github.com/greenbone/gsad/pull/54 + sed -i "/^install.*GSAD_RUN_DIR/d" CMakeLists.txt || die + + # Drop Group= directive. https://github.com/greenbone/gsad/pull/55 + sed -i "/^Group=/d" config/gsad.service.in || die +} + +src_configure() { + local mycmakeargs=( + "-DLOCALSTATEDIR=${EPREFIX}/var" + "-DSYSCONFDIR=${EPREFIX}/etc" + "-DSBINDIR=${EPREFIX}/usr/bin" + "-DGSAD_PID_DIR=/run/gsad" + "-DSYSTEMD_SERVICE_DIR=$(systemd_get_systemunitdir)" + "-DLOGROTATE_DIR=${EPREFIX}/etc/logrotate.d" + ) + cmake_src_configure +} + +src_compile() { + # setting correct PATH for finding react-js + NODE_ENV=production PATH="$PATH:${S}/gsa/node_modules/.bin/" cmake_src_compile + if use doc; then + cmake_build -C "${BUILD_DIR}" doc + cmake_build doc-full -C "${BUILD_DIR}" doc + fi + cmake_build rebuild_cache +} + +src_install() { + if use doc; then + local HTML_DOCS=( "${BUILD_DIR}/doc/generated/html/." ) + fi + cmake_src_install + + systemd_install_serviced "${FILESDIR}/gsad.service.conf" \ + ${PN}.service + + insinto /etc/gvm/sysconfig + doins "${FILESDIR}/${PN}-daemon.conf" + + newinitd "${FILESDIR}/${PN}-22.init" "${PN}" + newconfd "${FILESDIR}/${PN}-daemon.conf" "${PN}" +} diff --git a/net-analyzer/gsad/metadata.xml b/net-analyzer/gsad/metadata.xml index c68ff94a68fa..27bf47cfefc0 100644 --- a/net-analyzer/gsad/metadata.xml +++ b/net-analyzer/gsad/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> diff --git a/net-analyzer/gvm-libs/Manifest b/net-analyzer/gvm-libs/Manifest index dbf566a9253d..802d1e55bc1e 100644 --- a/net-analyzer/gvm-libs/Manifest +++ b/net-analyzer/gvm-libs/Manifest @@ -1,5 +1,7 @@ AUX gvm-libs-20.8.1-disable-automagic-dep.patch 961 BLAKE2B 5a233bfd45a6a3d165c6b836ba29e754dd1186f5fb703f333e6130e4e28d17e165e88fa22797c957d6720f1594e8381dabd9584fdbb4bdab66424752fcc305dc SHA512 07f355dc640cbeb16945ab0d51f5e550b1186c94dd60c500bc26fa90ab5fa7f132b80e0427be416e551b8173d88ed9bbfffc500e9b0183d8b9724420a6ff1176 AUX gvm-libs-21.4.4-pcap-config-whitespace.patch 1124 BLAKE2B b20a25c7e4619480daec90aae18eb3aba26ba1bd649055d4c8ee2c13e433a0b8244f638fee46713c7baafcfe472820c0f08d32ce48d01d532bb4a6073190348d SHA512 65af0d5a2cef881ea743d3f8776e5c47eeffae9fc5e2859bc5da2a80417e69fa511df132f3e8614705a08ccb91a405979aecceb71a05f7633de371ad3ab38ae8 DIST gvm-libs-21.4.4.tar.gz 298551 BLAKE2B 271716d8be2376e2b54218b95069e19d10939c5feda9894220418bf184c4098eeacf61d1faedd49fe3215aa0fbf4a4afcfe2a929ac88450502737eb8af8f8e35 SHA512 6c80820c830cbc2e62865a0823740d857db075f2faa1a1e58af7a8f07e0179e7a78934d7613ec57f144900a5530206d4c07c912a6bbe40ad9d0549f9443bfb12 +DIST gvm-libs-22.6.3.tar.gz 309045 BLAKE2B 9627fbdbb9d7a77542242311bce83e760316aea9f5c7b4c275aada18b6407cda41f5a0e1bd1e7202a16304e11772ddeabb01513ec67b7310d95e6522676fec1a SHA512 7b2db4c7aa2361e6dbaca002755bea00eca333f9edf6da5d3c1cf41c6abac32c60f2721f4f152ea6d6bc0f366bdd6249b0693df711ab35e933cd7e22bf028002 EBUILD gvm-libs-21.4.4-r3.ebuild 2570 BLAKE2B d20817c51644edba8fb8459bc6105bfdd16be1f5e266e76d7815d29c10cc6d7ef65adfe43da0ac1c5f1d4587027db8586f8c218453f63c1d5efc319b3a8cfefd SHA512 31f853d8bd718597e8cc0090a156289c49e823d6f12f9d41d3f8c29182ddcac51be4792807f00711d174d2d46f7453812c863f7fa487bbab7d3cb4939d6dae81 -MISC metadata.xml 750 BLAKE2B 01c13e113440254bd7d6f53e6f364b477ebddeb1ac4817085f54d33c3e4b9c206f9f64efbdf90d06958d5d61f441e556dd93e0d8bd03a75eacef3d521a6cbb00 SHA512 ebba69ccc44d52a5d6fbe4f13356f36cf280166a6dabf5ef7f4177115d9d3811650ba259765b7d01dd58dbe7e631f71a584c0ed2d703c15b6c2f3d22d0c88f2b +EBUILD gvm-libs-22.6.3.ebuild 2464 BLAKE2B 68719edeea57e9614a7df7a383e6f9c91905ddeda5f6c9f34c3b4c6ecfaf52d806d5aad77b3fd1296c51ff82740c159c436562f3312cc06f94795b5e5b9f4acb SHA512 beaf6de9e1b065efaa1b2a7d8a4926614449b6e0acf1f76ee5ace2084edec1e449e10bb765ea14bb7c292948e5163735f5249211ba3557eda5cebc61fc83bbd0 +MISC metadata.xml 877 BLAKE2B c60f3e763d17fabfe0260b1b7e9fe9fa738fb04fdac9b115f2263bae2d7407389cb6869e997947ec1e78644ebd92fe3be1d2ab446d46e4bbd80a39246235a4ad SHA512 74cc7cd53433c09c046241ba5a21795836bbd9b87556f1a2b4fa1cdc4a66238a6b224a948896c396fa68c6331b13037b8985e0ce3dff90886d24fb3bdf0cdfca diff --git a/net-analyzer/gvm-libs/gvm-libs-22.6.3.ebuild b/net-analyzer/gvm-libs/gvm-libs-22.6.3.ebuild new file mode 100644 index 000000000000..a1e56e3d32e0 --- /dev/null +++ b/net-analyzer/gvm-libs/gvm-libs-22.6.3.ebuild @@ -0,0 +1,111 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit cmake toolchain-funcs + +DESCRIPTION="Greenbone Vulnerability Management (GVM) libraries" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/gvm-libs/" +SRC_URI="https://github.com/greenbone/gvm-libs/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="GPL-2+" +SLOT="0" +KEYWORDS="~amd64 ~x86" +IUSE="doc ldap test radius" +RESTRICT="!test? ( test )" + +DEPEND=" + acct-user/gvm + app-crypt/gpgme:= + dev-libs/glib:2 + dev-libs/hiredis:= + dev-libs/libgcrypt:= + dev-libs/libgpg-error + dev-libs/libxml2 + dev-perl/UUID + net-libs/gnutls:= + net-libs/libnet:1.1 + net-libs/libpcap + net-libs/libssh:= + sys-apps/util-linux + sys-libs/libxcrypt:= + sys-libs/zlib + dev-libs/paho-mqtt-c:1.3 + ldap? ( net-nds/openldap:= ) + radius? ( net-dialup/freeradius-client ) +" +RDEPEND="${DEPEND}" +BDEPEND=" + dev-vcs/git + sys-devel/bison + sys-devel/flex + virtual/pkgconfig + doc? ( + app-doc/doxygen[dot] + app-doc/xmltoman + app-text/htmldoc + dev-perl/CGI + dev-perl/SQL-Translator + ) + test? ( dev-libs/cgreen ) +" + +src_prepare() { + cmake_src_prepare + # QA-Fix | Remove doxygen warnings for !CLANG + if use doc; then + if ! tc-is-clang; then + local f + for f in doc/*.in; do + sed -i \ + -e "s*CLANG_ASSISTED_PARSING = NO*#CLANG_ASSISTED_PARSING = NO*g" \ + -e "s*CLANG_OPTIONS*#CLANG_OPTIONS*g" \ + "${f}" || die "couldn't disable CLANG parsing" + done + fi + fi + + #Remove tests that doesn't work in the network sandbox + if use test; then + sed -i 's/add_test (networking-test networking-test)/ /g' base/CMakeLists.txt || die + sed -i 's/add_test (util-test util-test)/ /g' boreas/CMakeLists.txt || die + fi +} + +src_configure() { + local mycmakeargs=( + "-DLOCALSTATEDIR=${EPREFIX}/var" + "-DSYSCONFDIR=${EPREFIX}/etc" + "-DGVM_RUN_DIR=${EPREFIX}/var/lib/gvm" + "-DBUILD_TESTS=$(usex test)" + "-DBUILD_WITH_RADIUS=$(usex radius)" + "-DBUILD_WITH_LDAP=$(usex ldap)" + ) + cmake_src_configure +} + +src_compile() { + cmake_src_compile + if use doc; then + cmake_build -C "${BUILD_DIR}" doc + cmake_build doc-full -C "${BUILD_DIR}" doc + fi + cmake_build rebuild_cache + if use test; then + cmake_build tests + fi +} + +src_install() { + if use doc; then + local HTML_DOCS=( "${BUILD_DIR}"/doc/generated/html/. ) + fi + cmake_src_install + + # Set proper permissions on required files/directories + keepdir /var/lib/gvm + if ! use prefix; then + fowners -R gvm:gvm /var/lib/gvm + fi +} diff --git a/net-analyzer/gvm-libs/metadata.xml b/net-analyzer/gvm-libs/metadata.xml index dcb5742e94b2..df3bcf4ee54f 100644 --- a/net-analyzer/gvm-libs/metadata.xml +++ b/net-analyzer/gvm-libs/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> diff --git a/net-analyzer/gvm-tools/Manifest b/net-analyzer/gvm-tools/Manifest index ba04222be324..5d027988a6bd 100644 --- a/net-analyzer/gvm-tools/Manifest +++ b/net-analyzer/gvm-tools/Manifest @@ -1,3 +1,5 @@ DIST gvm-tools-21.10.0.tar.gz 162620 BLAKE2B b205fad4ef05dbd7f8d01b92cf8c123145cb526320dbe881b82ae53ebfbe5e1ee5858996687e256540dd9ce66a8fa50937b6bc0b79888c2c43389db107cefcb0 SHA512 0dc202debaae1431194585575d11b1af6aa057456429dc46e7bf6677b2217fd8569572dc71b8ada578caa961ff2b371a364fb67277c40e76e3025b6b3fcb3a5b +DIST gvm-tools-23.4.0.tar.gz 219320 BLAKE2B 5ea56fbe1c613837eb8e5d17714439275b6e544c55a1bc4a86333e18b6772dddb5d425a78caccd1a5382cc83678bf927d21e96fd2738870a6cd3adf7200f958e SHA512 41830e2388eb661d2e64fd63bf42f50adc4d3a1ec5fbe708d0cea072bf0256f10177424989a3fe44c6d93a7e88bcbba139f05e1ff11f85546a5a639974c14ad3 EBUILD gvm-tools-21.10.0-r1.ebuild 1027 BLAKE2B 5b6618bf2b4a8dcb994dbee4249e7a0fb31ab2c3153c6bc3788839c3e8291125a6ca7c7ec406be1a6561cf4a1f54e35bc9f5c000eb4958453a2fa94e9fa2457d SHA512 2394382c8652ae738707b785999b9da4c4bd0e731b2a47539b2d9ca1f69ba882252ed084117e008542e9caaf432e9d7a69e408486a983fe4d361df3b2eee18c9 -MISC metadata.xml 902 BLAKE2B abe5956777a65453ee64130c58d6c1dafa31eca4d081e52408a020f50b2f7902e9854f7d963a26bd31160b9f3c58d969bb2c9e03ea6145a83c3feffc857ed6fc SHA512 d8f38fb07e80da6869ab0e02f8b33799e083ad59f09da4fda6c7f9cd74ba9f1af86885301a79e9e46607458a38f9b5b354e5544cffd4ec372eab5299318be6eb +EBUILD gvm-tools-23.4.0.ebuild 623 BLAKE2B 9058d528ffdf112f209e9f13f89521514e705d1bb268ed3fb207305bfcee36a6218ce1b6b7f7d84fd3e13fc383e3a8fb53eef339b4d16dc19faf0479e76da143 SHA512 f052e150bb957f7b8f29039fe83c44e6bd65fd7aad2a3ad5f8e304adaa4f4ec7c5a95199b78db3b6abcd0ddf26d3eecda95f4e81c078973ea2f4a2331ce0982d +MISC metadata.xml 1029 BLAKE2B 91595f8420740154d2823126b12f7b67740660a08dbf5b78b26fa59523b3a37238e64d0abbbfc4fdb3dc99cc741ea0c21160923ab67030a4a77b04f1b3a11481 SHA512 0b958ded9193e1acde6db72b15cea25bc9837afb82769cf12c5434afd0223874014a05dffee8680d0bbd27f263c2adb9b5b7f25b7dfddd9f79aa54b837482576 diff --git a/net-analyzer/gvm-tools/gvm-tools-23.4.0.ebuild b/net-analyzer/gvm-tools/gvm-tools-23.4.0.ebuild new file mode 100644 index 000000000000..accfcb9a95f1 --- /dev/null +++ b/net-analyzer/gvm-tools/gvm-tools-23.4.0.ebuild @@ -0,0 +1,23 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{10..11} ) +DISTUTILS_USE_PEP517=poetry +inherit distutils-r1 + +DESCRIPTION="Remote control for Greenbone Vulnerability Manager, previously named openvas-cli" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/gvm-tools/" +SRC_URI="https://github.com/greenbone/gvm-tools/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="GPL-3" +KEYWORDS="~amd64 ~x86" + +RDEPEND=" + >=net-analyzer/python-gvm-23.4.2[${PYTHON_USEDEP}] +" +DEPEND="${RDEPEND}" + +distutils_enable_tests unittest diff --git a/net-analyzer/gvm-tools/metadata.xml b/net-analyzer/gvm-tools/metadata.xml index 3be5a1ca7d69..49aa4756bce9 100644 --- a/net-analyzer/gvm-tools/metadata.xml +++ b/net-analyzer/gvm-tools/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> diff --git a/net-analyzer/gvm/Manifest b/net-analyzer/gvm/Manifest index 822daf15281c..7a41c5004020 100644 --- a/net-analyzer/gvm/Manifest +++ b/net-analyzer/gvm/Manifest @@ -1,2 +1,5 @@ +AUX gvm.init 550 BLAKE2B 20b5bfc7425abd0fc6a4e7c0b71641c4fe227f3ba43ee1416732b2e52f61944ab57a48d630787a1ad1a773a9cd4d7d569d709610c57de9f7d0c9b1537d8a0508 SHA512 2b63026a0cbc8d4be7c46fffca830d0e6cbe069fdef516448325c761adb44529bf70e9071c32a1ab3352d87b40830d3f9e4e7c629c27a6f4615b3ab6c4403b0e +AUX gvm.target 338 BLAKE2B 215e2bf35ad1be674a77093db9b4a010f6145f295af172959db6b88b6d11616af1fa8b81744a5dcfc54b8a1bdcb9e5bad7c8b7ea969a0ce07cc4881ff98d05f5 SHA512 3999a33fb28bc30619fa8b39290c9f4545568bf5d15b518455d2e896c07d1002cad51ba6391627b26894dd653999ad571a7fb354a87e2ac707bbb1753e35e1a1 EBUILD gvm-21.4.ebuild 899 BLAKE2B d1088b804e9c6ef988e60e6e8fed8346f172ac364b59e7ff03ca5db8de22986db5f6c6e476d4d664c9cbd73cb32359a779002bb9eddd05c6a97d465cc666b4fb SHA512 045aa2ff19fdc6178d934df1f06606c1ad862c83569e4d12592671ac7d31ade18c27f7adf97f660f402ed50c150207b4e806bed1564500ba8c3158479e8f3d69 -MISC metadata.xml 968 BLAKE2B d35340dc406f958ba10d99658262fa9915515d11cd323c29753680fc9d8e9d07c4ffc3ac91801d0b0f158ee013f7231ddcf3f9704f40fa7371e83d45d0c0959a SHA512 bfa8bd4312db0d168ff9cd2847e25d32dacaf571ebc5cda1b45d12e10feb3fdedc0597491a94acca535ab8debf63b4feeaae842930b3bc704cf589b1cfec711e +EBUILD gvm-22.4.ebuild 1126 BLAKE2B 6b86293d6eff7935670f45ce4bbc42d53e48f7c9a004fdfe5972e3ab604139251f100e64f1f14b3d04e5fc649c2adb67c0e16b087bcc1183a984728e368f8882 SHA512 436bd77be522cedfc43092a532c8be5358d0fc9ca50e3beb72820f49e13425fd51590727f0b6a2f52713d26b88fcbc6e02803ed7d261e5ac8cb4b192f6232a9e +MISC metadata.xml 1095 BLAKE2B 2c01e221dbde7b0a8d83c0c0b70af67eaebe273199d5411f2c5b3da246193ed26d9c45fa5f901be6f22c557cf866a18238a16ec16b2d9d39971d1f88ad1bdb52 SHA512 521b8ff80e4d0d13cc7c008009ed283a422126c1cd560f10063f09c301b6821d81dd59463cf90cbc3d245260150e12ec9682de513a8dcae238fb3ef5cd094b51 diff --git a/net-analyzer/gvm/files/gvm.init b/net-analyzer/gvm/files/gvm.init new file mode 100644 index 000000000000..bfd184221622 --- /dev/null +++ b/net-analyzer/gvm/files/gvm.init @@ -0,0 +1,25 @@ +#!/sbin/openrc-run +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +: ${GVM_USER:=gvm} +: ${GVM_GROUP:=$(id -ng ${GVM_USER})} +: ${GVM_TIMEOUT:=30} + +name="Greenbone Vulnerability Manager" +command="/bin/true" +command_background="true" +command_user="${GSAD_USER}:${GSAD_GROUP}" +pidfile="/run/gvm/gvm.pid" +retry="${GSAD_TIMEOUT}" + +depend() { + after bootmisc + need localmount net redis-openvas ospd-openvas gvmd gsad + want notus-scanner +} + +start_pre() { + mkdir /run/gvm + chown -R gvm:gvm /run/gvm/ +} diff --git a/net-analyzer/gvm/files/gvm.target b/net-analyzer/gvm/files/gvm.target new file mode 100644 index 000000000000..783f8781579a --- /dev/null +++ b/net-analyzer/gvm/files/gvm.target @@ -0,0 +1,5 @@ +[Unit] +Description=Greenbone Vulnerability Manager +Requires=multi-user.target redis-openvas.service ospd-openvas.service gvmd.service gsad.service +Wants=notus-scanner.service +After=syslog.target network.target networking.service multi-user.target notus-scanner.service redis-openvas.service ospd-openvas.service gvmd.service gsad.service diff --git a/net-analyzer/gvm/gvm-22.4.ebuild b/net-analyzer/gvm/gvm-22.4.ebuild new file mode 100644 index 000000000000..4639c27b5590 --- /dev/null +++ b/net-analyzer/gvm/gvm-22.4.ebuild @@ -0,0 +1,40 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit optfeature systemd + +DESCRIPTION="Greenbone Vulnerability Management, previously named OpenVAS" +HOMEPAGE="https://www.greenbone.net" + +SLOT="0" +LICENSE="AGPL-3+" +KEYWORDS="~amd64 ~x86" +IUSE="cli doc +gsa ldap ospd snmp radius" + +RDEPEND=" + >=net-analyzer/gvm-libs-${PV}[doc?,ldap?,radius?] + >=net-analyzer/gvmd-${PV}[doc?] + >=net-analyzer/openvas-scanner-${PV}[doc?,snmp?] + >=net-analyzer/greenbone-feed-sync-23.6.0 + cli? ( >=net-analyzer/gvm-tools-21.10.0 ) + gsa? ( >=net-analyzer/gsad-${PV}[doc?] ) + ospd? ( >=net-analyzer/ospd-openvas-${PV}[doc?] ) +" + +src_unpack() { + mkdir "${WORKDIR}/${P}" +} + +src_install() { + systemd_dounit "${FILESDIR}/${PN}.target" + newinitd "${FILESDIR}/${PN}.init" "${PN}" +} + +pkg_postinst() { + optfeature "web server scanning and testing tool" net-analyzer/nikto + optfeature "IPsec VPN scanning, fingerprinting and testing tool" net-analyzer/ike-scan + optfeature "port scanner" net-analyzer/nmap + optfeature "create results from local security checks" net-analyzer/notus-scanner +} diff --git a/net-analyzer/gvm/metadata.xml b/net-analyzer/gvm/metadata.xml index 8beb6053f456..588dd28fa08c 100644 --- a/net-analyzer/gvm/metadata.xml +++ b/net-analyzer/gvm/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> diff --git a/net-analyzer/gvmd/Manifest b/net-analyzer/gvmd/Manifest index f7cec0254d79..807fce7d10d4 100644 --- a/net-analyzer/gvmd/Manifest +++ b/net-analyzer/gvmd/Manifest @@ -2,7 +2,12 @@ AUX gvm-sync-all 727 BLAKE2B d92b004173747814bf063c5aa05fcfd5b37c04ab7eb9d044da2 AUX gvm-sync-all.service 170 BLAKE2B 31aa75ba8733c73a2db4afbaf49eb5c40da3aaf9d4f11aad4b06dc2dc07dc927a54d2c2c8397eaeb43318430063b69fe2d803f16613af88887f8aad2638ee2f1 SHA512 8d9b862f729c64394b8801d36fefe4dfab0e0a80b603a19ed112f7a37e77c5a5cf906abafdd819b79df8dabc089b846e463c53317b0803e96dc2a5878a5639f2 AUX gvm-sync-all.timer 183 BLAKE2B f91b69c6b2a5024c6cd9d678676071f7d5e175a3b35e0e34ffc03be7630df7519948c6c3285c7b265c73c0b7b4485706bba5673f89234c478ad6cd43d7305ddc SHA512 3716c8057bab3926b57e5e9868f4e00ec95940e5a9ea0506e16a152a76cb9b388ba5f0c8404245dcba5ba26bc789f0670781c41568d53a82412cd19689aca2c6 AUX gvmd-21.4.5.init 771 BLAKE2B ade6f5e9da956d430062c4af610a496e449d5958897493a4b64323c2a2c74a47c5caf1d273c9a1186ce091048b63f0f685b33da9beecd2e6adbc9dce4b9196e4 SHA512 c481fb8352b34f4035c258858ef61ca90e36761210527360db8cda4c8687b2cb6fa1130f4f8a1b0f6046b3f39066c89e34c2c3c00b2090c8bd60bed57bb92197 +AUX gvmd-22.init 881 BLAKE2B 112a26516731258abb1ff91fd8f81eb1f77bed2ff77540d10c416d18e580690f863fe4a7b0d87f22117c772e154ba5599c82ac6eaa595261a1cc29749f418914 SHA512 126cf722e6d087cf911794abb33c7468096d4f98725ff98d52db510d1e277f35d53397a19a35672304713fa09ac5fdc94ddd4321306900413f30ee42eab37062 +AUX gvmd-daemon-22.conf 818 BLAKE2B 15febb320cc0358beb6f2bb02c740f3ec3eb24f06154fe4f61afaf140e7b9a0a65288cd4c84c34b156c6129c1526eb8b0efc9668cc93aecbd50bdf7a7d5d3675 SHA512 9bd2b3dfd0f2417a2d575ef063cecb0d9f4babe6371eff5f94e38f3e8c61fe769b16d50d492c4564f0d9a702b4eb9207c004c94efec172f278ee088cae04b487 AUX gvmd-daemon.conf 813 BLAKE2B b4d73d6a5cc17325f56b250bf1e63fab808bf7e36a0b357641de87d54a3238fd68cf34cba08ce606827e3441e042c514cfc4ce73ff88b70cd4dea080dd68eb97 SHA512 1fcce48ed1d53489f4509138b3570790574003931289e65ab0f767a51da1e5d6c8d33c44da8d967f6c0442f0bee500bf46554a49b113fe0bc933dffd3fb121eb +AUX gvmd.service.conf 552 BLAKE2B f941faaa568d378d78c911e8c79b6d0cd384e042f6af2bd0d1d5f2ec1af432d86d548f1cc1e2ebed161b5f7c866b716fa1a456d51725e70ed513b55f62c647df SHA512 0e74bc4851c07ddfaf9cee361b466c1ae3eafa25b3d1722bd9cc925b2d648c62706ffd10504fa2a530bae72ba756f083388f570fad76835db3087eea2bd8573e DIST gvmd-21.4.5.tar.gz 1041186 BLAKE2B 18edc375084a6c6445f12779935e34d20826d2390481cbcdc06cab8dea81ea9c6bddeda437b081137f858e860f725431d33d5654eae231e303e0dc5618a89c8a SHA512 5b22b9bfd58ae73fb973941c7a96027599ccc5b78d822eac9c840460cb75bf60a398519569daa04d5c4d935dbe3974335f87e2c1c5fa751b4cec1ea6e5f064ec +DIST gvmd-22.5.1.tar.gz 1031083 BLAKE2B 8c999b86e049828aadbdafcf14aad98772f05f5be3bcd7bed2176fbfddf83042d8092e6cc56325db1b5edc1ba6e33a4b508e8de593b7c4962096911e3f464ade SHA512 483bda9d05b77db2047fe4ba8e37ac062baade55234573665ed46441ff3ea220a2485829a1357f5a60ea27e304c8906ff12db7a1d41917b09d9243b4a9e763d6 EBUILD gvmd-21.4.5-r5.ebuild 3198 BLAKE2B 9edf07dcf189b01b98e27aa2230e082d53bb5491da674fecd0d743475ba0bbb87cde73ea8fffe8b320aee002abd489b942ac34687e955a1c3818a9b347752581 SHA512 7eccbc904374ce4713e22c209e0ec3720e3c81e38b5d21391f6c84bde92b97f68c7f65a1af787e79cf97264b597ed112c793ac208f3d54234fbf821dd792d21a -MISC metadata.xml 1011 BLAKE2B 5edc107135ad9743311cb0ddd8e3f45ba83b3c2252678e013e93dd3794f95105eb758c8e6154c177941cd620c3eced40e83b8f68f111b287a548725185357e43 SHA512 c8494a6c93a3731c315caa23c6c7b9d45a9413e5ce9b4d4d5a3558ff40fb190473a4e12076a3c3ff740f157931fca76ad26dbac25c2fb734f67982f6b4e00060 +EBUILD gvmd-22.5.1.ebuild 3294 BLAKE2B 4e627afcc395ba8876e6d5200836f6582d4585c41506deada63736ecc0de3dcd42ef65c03fd12d96782a1c17921260db95833e30d498fb7a2fee023414d2f9b9 SHA512 88a01e213a2fadd2d77941fa4887bcefe177b21f49292b6f18a538891c4bb0d22960b2d5164d8e96efbf4e236ee48d30ab61ce13501fb1c1525bf088563f8e25 +MISC metadata.xml 1138 BLAKE2B 5abfda85605cdc2bacbfc1295b9b443ceecda1a3bd51423a1c35c4799d42f8aec6c4d5c8bc29293a800193016bc0065361ff55616859064c061b105b31fb0f18 SHA512 f09448bd5acd5ed22611ac455c94a3ae0a0531a9aeec6bad638c48cfeb627fef5214c0734d04951ef18ee96046b8e89b812c198e6147fb21f8d5dd495ed4bb67 diff --git a/net-analyzer/gvmd/files/gvmd-22.init b/net-analyzer/gvmd/files/gvmd-22.init new file mode 100644 index 000000000000..f1ac6ddbac72 --- /dev/null +++ b/net-analyzer/gvmd/files/gvmd-22.init @@ -0,0 +1,30 @@ +#!/sbin/openrc-run +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +: ${GVMD_USER:=gvm} +: ${GVMD_GROUP:=gvm} +: ${GVMD_TIMEOUT:=30} + +name="Greenbone Vulnerability Manager" +command=/usr/bin/gvmd +command_args="${GVMD_OPTIONS} ${GVMD_LISTEN_ADDRESS_TCP} ${GVMD_PORT} ${GVMD_SCANNER_HOST} ${GVMD_GNUTLS_PRIORITIES}" +command_user="${GVMD_USER}:${GVMD_GROUP}" +pidfile="/run/gvmd/gvmd.pid" +retry="${GVMD_TIMEOUT}" + +depend() { + after bootmisc postgresql postgresql-9.6 postgresql-10 postgresql-11 postgresql-12 postgresql-13 postgresql-14 postgresql-15 + need localmount net ospd-openvas +} + +start_pre() { + mkdir /run/gvmd + for p in gvm-checking gvm-create-functions gvm-helping gvm-migrating gvm-serving; do + touch /run/gvmd/${p} + done + chown -R gvm:gvm /run/gvmd/ + + touch /run/feed-update.lock + chown gvm:gvm /run/feed-update.lock +} diff --git a/net-analyzer/gvmd/files/gvmd-daemon-22.conf b/net-analyzer/gvmd/files/gvmd-daemon-22.conf new file mode 100644 index 000000000000..e1a5482747fc --- /dev/null +++ b/net-analyzer/gvmd/files/gvmd-daemon-22.conf @@ -0,0 +1,29 @@ +# GVMD command args + +# e.g --foreground +GVMD_OPTIONS="" + +# Manager listen address unix socket +# Failing under non-root user (looking for solution) +GVMD_LISTEN_ADDRESS_UNIX="--unix-socket=/run/gvmd/gvmd.sock" + +# Manager listen address TCP +GVMD_LISTEN_ADDRESS_TCP="--listen=127.0.0.1" + +# Manager listen port +GVMD_PORT="--port=9390" + +# Manager unix socket listen owner +GVMD_LISTEN_OWNER="--listen-owner=gvm" + +# Manager unix socket listen group +GVMD_LISTEN_GROUP="--listen-group=gvm" + +# Manager unix socket listen mode +GVMD_LISTEN_MODE="--listen-mode=755" + +# Scanner listen address unix socket +GVMD_SCANNER_HOST="--scanner-host=/run/ospd/ospd-openvas.sock" + +# TLS settings +GVMD_GNUTLS_PRIORITIES="--gnutls-priorities=SECURE256:+SUITEB192:+SECURE192:+SECURE128:+SUITEB128:-MD5:-SHA1:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-SSL3.0" diff --git a/net-analyzer/gvmd/files/gvmd.service.conf b/net-analyzer/gvmd/files/gvmd.service.conf new file mode 100644 index 000000000000..5aa19bf2efd4 --- /dev/null +++ b/net-analyzer/gvmd/files/gvmd.service.conf @@ -0,0 +1,21 @@ +[Unit] +After=postgresql-9.6.service +After=postgresql-10.service +After=postgresql-11.service +After=postgresql-12.service +After=postgresql-13.service +After=postgresql-14.service +After=postgresql-15.service +Wants=postgresql-9.6.service +Wants=postgresql-10.service +Wants=postgresql-11.service +Wants=postgresql-12.service +Wants=postgresql-13.service +Wants=postgresql-14.service +Wants=postgresql-15.service +PartOf=gvm.target + +[Service] +Type=exec +ExecStart= +ExecStart=/usr/bin/gvmd --foreground --osp-vt-update=/run/ospd/ospd-openvas.sock --listen-group=gvm diff --git a/net-analyzer/gvmd/gvmd-22.5.1.ebuild b/net-analyzer/gvmd/gvmd-22.5.1.ebuild new file mode 100644 index 000000000000..22ce3ef705d4 --- /dev/null +++ b/net-analyzer/gvmd/gvmd-22.5.1.ebuild @@ -0,0 +1,129 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit cmake systemd toolchain-funcs + +DESCRIPTION="Greenbone vulnerability manager, previously named openvas-manager" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/gvmd/" +SRC_URI="https://github.com/greenbone/gvmd/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="AGPL-3+" +KEYWORDS="~amd64 ~x86" +IUSE="doc test" +RESTRICT="!test? ( test )" + +DEPEND=" + acct-user/gvm + app-crypt/gpgme:1= + >=dev-db/postgresql-9.6:=[uuid] + >=dev-libs/glib-2.42:2 + >=dev-libs/libical-1.0.0 + >=net-analyzer/gvm-libs-20.08.0 + >=net-libs/gnutls-3.2.15[tools] +" +# gvmd (optionally) uses xml_split from XML-Twig at runtime. And texlive +# and xmlstartlet are used for (PDF) report generator at runtime. +RDEPEND=" + ${DEPEND} + app-text/xmlstarlet + dev-perl/XML-Twig + dev-texlive/texlive-latexextra + >=net-analyzer/ospd-openvas-22.4 + >=dev-db/pg-gvm-22.4 +" +BDEPEND=" + sys-devel/bison + sys-devel/flex + virtual/pkgconfig + doc? ( + app-doc/doxygen[dot] + app-doc/xmltoman + app-text/htmldoc + dev-libs/libxslt + ) + test? ( dev-libs/cgreen ) +" + +src_prepare() { + cmake_src_prepare + # QA-Fix | Use correct FHS/Gentoo policy paths for 9.0.0 + sed -i -e "s*share/doc/gvm/html/*share/doc/${PF}/html/*g" doc/CMakeLists.txt || die + sed -i -e "s*/doc/gvm/*/doc/${PF}/*g" CMakeLists.txt || die + # QA-Fix | Remove !CLANG Doxygen warnings for 9.0.0 + if use doc; then + if ! tc-is-clang; then + local f + for f in doc/*.in + do + sed -i \ + -e "s*CLANG_ASSISTED_PARSING = NO*#CLANG_ASSISTED_PARSING = NO*g" \ + -e "s*CLANG_OPTIONS*#CLANG_OPTIONS*g" \ + "${f}" || die "couldn't disable CLANG parsing" + done + fi + fi +} + +src_configure() { + local mycmakeargs=( + "-DLOCALSTATEDIR=${EPREFIX}/var" + "-DSYSCONFDIR=${EPREFIX}/etc" + "-DLIBDIR=${EPREFIX}/usr/$(get_libdir)" + "-DSBINDIR=${EPREFIX}/usr/bin" + "-DSYSTEMD_SERVICE_DIR=$(systemd_get_systemunitdir)" + "-DGVM_DEFAULT_DROP_USER=gvm" + ) + cmake_src_configure +} + +src_compile() { + cmake_src_compile + if use doc; then + cmake_build -C "${BUILD_DIR}" doc + cmake_build doc-full -C "${BUILD_DIR}" doc + fi + if use test; then + cmake_build tests + fi + cmake_build rebuild_cache +} + +src_install() { + if use doc; then + local HTML_DOCS=( "${BUILD_DIR}"/doc/generated/html/. ) + fi + cmake_src_install + + insinto /etc/gvm/sysconfig + newins "${FILESDIR}/${PN}-daemon-22.conf" "${PN}-daemon.conf" + if ! use prefix; then + fowners -R gvm:gvm /etc/gvm + fi + + newinitd "${FILESDIR}/${PN}-22.init" "${PN}" + newconfd "${FILESDIR}/${PN}-daemon-22.conf" "${PN}" + + # Set proper permissions on required files/directories + keepdir /var/lib/gvm/gvmd + if ! use prefix; then + fowners -R gvm:gvm /var/lib/gvm + fi + + dosbin "${FILESDIR}"/gvm-sync-all + systemd_dounit "${FILESDIR}"/gvm-sync-all.{service,timer} + + systemd_install_serviced "${FILESDIR}/gvmd.service.conf" \ + ${PN}.service +} + +pkg_postinst() { + elog "If you are upgrading from a previous version, you need to update the database version." + elog "Please, create the running directory and give write permission to the database user" + elog "then run gvmd as the gvm user with --migrate option:" + elog "~# mkdir /run/gvmd" + elog "~# setfacl -m u:gvm:rwx /run/gvmd/" + elog "~# sudo -u gvm gvmd --migrate" +} diff --git a/net-analyzer/gvmd/metadata.xml b/net-analyzer/gvmd/metadata.xml index f0294aac8dd0..362c0017dc23 100644 --- a/net-analyzer/gvmd/metadata.xml +++ b/net-analyzer/gvmd/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> diff --git a/net-analyzer/notus-scanner/Manifest b/net-analyzer/notus-scanner/Manifest new file mode 100644 index 000000000000..925dab0ceaa7 --- /dev/null +++ b/net-analyzer/notus-scanner/Manifest @@ -0,0 +1,7 @@ +AUX notus-scanner.confd 379 BLAKE2B 23aec44c8b7f20246bfb407fe5b79c0a229ea58c2a9965390db6ddb4dff9a8097b37599ac6cf4730aa32214d9b009970ccf1ca39d988b182421f0fb30a4985a2 SHA512 3fe1a15fa6ba6ac926a9449f88d632267dccef4099e0f1b66d06674518cdaea6ed624199afbe6558e3cb97c5ad912ea29d81de02d9e38d5a5e67f43caf966d03 +AUX notus-scanner.initd 607 BLAKE2B 230e0e6e6abb3e52a4af52e71a793d73537342d0583e28a1ac53c91c3ed13b250092e47e50b114d991209249a8281ff3cf80c753225ae7e0c1dfb912ad8613ab SHA512 680838ce4a0590448b5518d430c22e67305d9eea85cda18175303df5524b1b20ba95f7156502dd5b20afb0c070a7f3fb1f5c28094b5246ad7efa01a1092a4798 +AUX notus-scanner.service.conf 93 BLAKE2B 17030f4836aa96f45fdc9be67fb1b1924680ec29193bfc03d470bc45bf973542ca1b2bbb13253eb20c1618132b4b07c3fcaadd39451cb583d4c8f6fcd6e26c65 SHA512 36d5fbe95cd02b728d048a0baeed03448899696d0b3344a166afc9eecd6620e8af347ecc86c014ec9211ce72cc55a202a84b9ea68a7662c268378c37a734b08f +AUX notus-scanner.toml 273 BLAKE2B 742fd2f07418e020f37313fc275cf3ba44b3b3a701de7982eff3d5ebc74cdfe6618104799221d842bb2b7088b3444ecc4ce98aa28175da4a57876ea0c33e311a SHA512 bfa21bd4ee4c0cbcf8613a0fe5bcf31507aed94a74ddc139a6c1a5b1858f417ac40d00d0f8f1e849802632430b0a52c05231585237fbc397ffff03d1f013e5b6 +DIST notus-scanner-22.5.0.tar.gz 320894 BLAKE2B 3bf0cb633ad2636d9430705459d841b717139b162bd39f30a6bf06dafe1647b94c0e791b05390d340f97a4ff83351cbd71be6d5b1793dda82c6cad9250ce18c2 SHA512 48576d26a65c439fb00b345d97ba9917c3c2bf99ab5c94ed4488e4638c0442fdcd721ed8a08be147481a01bffc3eadec25029c0d6cd1aed2381221250b16c19d +EBUILD notus-scanner-22.5.0.ebuild 1597 BLAKE2B 54afbd677c4e8f8ef3df2ab383dfd458548eb0357ff56dbc0c9b8f1cdd62fde563bde3e20293be11614d4e62c7d1dc3f85e5cfab5a33720b643b376be7b76c29 SHA512 a0ee11cc90ff7e129cebef3b51cc5b8d30493857288d9e3dd56d647cab5f3c95b4499e74bdc958fd42c12ecb9e488462e280f6f342f9e020fd59ddb4e38afeb7 +MISC metadata.xml 735 BLAKE2B 78af413540fe6af7214b65b50b50aaf9cf59280037ada5228d38e529d90752b0516bf1d7514e7d9436edd93b50cd8a9dadc1e9fbf84a5c57a0ff0cb45b712cc8 SHA512 fdb4ce92c1eede58fe267ed2a4832dd1d4e7a1694591efb3d2ff372a621320275c4090317cb57c50724ceb7e386fa28965e45b724b311127ecd8665e2908cf92 diff --git a/net-analyzer/notus-scanner/files/notus-scanner.confd b/net-analyzer/notus-scanner/files/notus-scanner.confd new file mode 100644 index 000000000000..5000145abaeb --- /dev/null +++ b/net-analyzer/notus-scanner/files/notus-scanner.confd @@ -0,0 +1,11 @@ +# Notus Scanner command args + +NOTUS_SCANNER_OPTIONS="--log-file=/var/log/gvm/notus-scanner.log" + +NOTUS_SCANNER_MQTT_BROKER_ADDRESS="--mqtt-broker-address localhost" + +NOTUS_SCANNER_MQTT_BROKER_PORT="--mqtt-broker-port 1883" + +NOTUS_SCANNER_PRODUCTS_DIRECTORY="--products-directory /var/lib/notus/products" + +NOTUS_DISABLE_HASHSUM_VERIFICATION="--disable-hashsum-verification false" diff --git a/net-analyzer/notus-scanner/files/notus-scanner.initd b/net-analyzer/notus-scanner/files/notus-scanner.initd new file mode 100644 index 000000000000..e00e9118e32e --- /dev/null +++ b/net-analyzer/notus-scanner/files/notus-scanner.initd @@ -0,0 +1,23 @@ +#!/sbin/openrc-run +# Copyright 2023Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +name="Greenbone Notus Scanner" +command=/usr/bin/notus-scanner +pidfile="/run/notus-scanner/${RC_SVCNAME}.pid" +command_args="${NOTUS_SCANNER_OPTIONS} \ + ${NOTUS_SCANNER_MQTT_BROKER_ADDRESS} \ + ${NOTUS_SCANNER_MQTT_BROKER_PORT} \ + ${NOTUS_SCANNER_PRODUCTS_DIRECTORY} \ + ${NOTUS_DISABLE_HASHSUM_VERIFICATION} \ + --pid-file ${pidfile} \ + --config /etc/gvm/notus-scanner.toml" + +depend() { + after bootmisc + need localmount mosquitto +} + +start_pre() { + checkpath -d /var/run/notus-scanner +} diff --git a/net-analyzer/notus-scanner/files/notus-scanner.service.conf b/net-analyzer/notus-scanner/files/notus-scanner.service.conf new file mode 100644 index 000000000000..aea5c10e8fad --- /dev/null +++ b/net-analyzer/notus-scanner/files/notus-scanner.service.conf @@ -0,0 +1,7 @@ +[Unit] +PartOf=gvm.target + +[Service] +Type=forking +ExecStart= +ExecStart=/usr/bin/notus-scanner diff --git a/net-analyzer/notus-scanner/files/notus-scanner.toml b/net-analyzer/notus-scanner/files/notus-scanner.toml new file mode 100644 index 000000000000..cff33c77afc8 --- /dev/null +++ b/net-analyzer/notus-scanner/files/notus-scanner.toml @@ -0,0 +1,8 @@ +[notus-scanner] +mqtt-broker-address = "localhost" +mqtt-broker-port = "1883" +products-directory = "/var/lib/notus/products" +pid-file = "/run/notus-scanner/notus-scanner.pid" +log-file = "/var/log/gvm/notus-scanner.log" +log-level = "INFO" +disable-hashsum-verification = false diff --git a/net-analyzer/notus-scanner/metadata.xml b/net-analyzer/notus-scanner/metadata.xml new file mode 100644 index 000000000000..06038ba8d06e --- /dev/null +++ b/net-analyzer/notus-scanner/metadata.xml @@ -0,0 +1,19 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> +<pkgmetadata> + <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="project" proxied="proxy"> + <email>proxy-maint@gentoo.org</email> + <name>Proxy Maintainers</name> + </maintainer> + <longdescription lang="en"> + This is a new scanner that scans after every regular scan, so no user interaction is necessary. + It offers better performance due to less system resource consumption and thus, faster scanning. + </longdescription> + <upstream> + <remote-id type="github">greenbone/notus-scanner</remote-id> + </upstream> +</pkgmetadata> diff --git a/net-analyzer/notus-scanner/notus-scanner-22.5.0.ebuild b/net-analyzer/notus-scanner/notus-scanner-22.5.0.ebuild new file mode 100644 index 000000000000..3d2b52bf6bee --- /dev/null +++ b/net-analyzer/notus-scanner/notus-scanner-22.5.0.ebuild @@ -0,0 +1,63 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{10..11} ) +DISTUTILS_USE_PEP517=poetry +inherit distutils-r1 systemd + +DESCRIPTION="Notus is a vulnerability scanner for creating results from local security checks" +HOMEPAGE="https://github.com/greenbone/notus-scanner" +SRC_URI="https://github.com/greenbone/notus-scanner/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="AGPL-3 AGPL-3+" +KEYWORDS="~amd64 ~x86" +RESTRICT="!test? ( test )" + +DEPEND=" + acct-user/gvm + dev-libs/paho-mqtt-c + dev-python/psutil[${PYTHON_USEDEP}] + >=dev-python/python-gnupg-0.5.0[${PYTHON_USEDEP}] + <dev-python/packaging-23.2[${PYTHON_USEDEP}] + >=dev-python/sentry-sdk-1.22.2[${PYTHON_USEDEP}] + >=dev-python/rope-1.8.0[${PYTHON_USEDEP}] + >=dev-python/paho-mqtt-1.5.1[${PYTHON_USEDEP}] + <dev-python/tomli-3[${PYTHON_USEDEP}] +" + +RDEPEND=" + ${DEPEND} + app-misc/mosquitto +" + +distutils_enable_tests unittest + +python_compile() { + distutils-r1_python_compile +} + +python_install() { + distutils-r1_python_install + insinto /etc/gvm + doins "${FILESDIR}/${PN}.toml" + fowners gvm:gvm "/etc/gvm/${PN}.toml" + + # Set proper permissions on required files/directories + keepdir /var/lib/notus + keepdir /var/lib/notus/products + keepdir /var/lib/notus/advisories + if ! use prefix; then + fowners -R gvm:gvm /var/lib/notus + fi + + newinitd "${FILESDIR}/${PN}.initd" "${PN}" + newconfd "${FILESDIR}/${PN}.confd" "${PN}" + + systemd_dounit config/${PN}.service + + systemd_install_serviced "${FILESDIR}/notus-scanner.service.conf" \ + ${PN}.service +} diff --git a/net-analyzer/openvas-scanner/Manifest b/net-analyzer/openvas-scanner/Manifest index a1218ebb47e3..50ac612e724a 100644 --- a/net-analyzer/openvas-scanner/Manifest +++ b/net-analyzer/openvas-scanner/Manifest @@ -1,8 +1,16 @@ +AUX README.gentoo 130 BLAKE2B 80e91985525fae01255681488368efee7e1c83ed3309815bb4752ee0f51fea4c127a52e99363804dd9b6a3258ff31cb2cbfa746f72e9fe1ff698867c770ef977 SHA512 5797af28a282b480408c7c60a66ca49ce032d911f54048a097bb6092869a91a62577fdb817f634a8a9629a77ef463f913b4721190f6636c344bba104c354d545 AUX openvas-scanner-20.8.1-rpath-qa-fix.patch 350 BLAKE2B f4179757f30a43da6fbff329f776a8173c95848f749052429804a4680d26740c6727f918b23517b2dea68a08a55294c9455bbc437f4bb44d0f06dcd056dd82bd SHA512 f873bed2df048fb60dc21665817f99cea6fa1e377f0a7d5c5163831dddbebd2b0ca4e5c94f1ca22ab54f3079ebd230882fc8a269ead21550780aea81b9c01476 AUX openvas-scanner-7.0.1-disable-automagic-dep.patch 1100 BLAKE2B e5fe847c43636b883af91b34386a7d94bb1b088cddc3c95d8314c03dec25c1d071ed7562019abb5d31a75bb2c4fded63644552b411091889612ef6c5c1a837f4 SHA512 b6d678413ca2a4771dcd6833e19d754745f3a7530f227befdad745d30bf23862120cb18359c1088552db18fb13bf491ed4a47523f7326e628101c5ade4156c58 AUX openvas-scanner-7.0.1-fix-linking-with-lld.patch 1074 BLAKE2B de151d837cf188e398ff2c193e8df056377c2fbd2597b0a98991f38fc48802e323d6f617ceacaa82845ab385335a722416a30723878bfc700a45b44de779cc62 SHA512 7ed1bf3560a5c5cca0acc22845fdc370d677c773477f5006a3223225b63c2cf41709dcb883c38e152d97419733e62731598560a6b4aed2e4ab12a6cdb51446b7 AUX openvas.conf 29 BLAKE2B 0cb02f4b349d996b07ca19a531b64a35692ce5afb0d1fd4b58b6c80ccce3caf82055b396b23fa14f561eb9b732afba0fdfccade4c33c5e300fa1aca41b3995b7 SHA512 7ae3c5eff9a63a5eaadee5886c80baa46ff123695a55e92f21178421bd69322b4c1c06615fd81ea461b61da12ff0e03f523ea3110105a58e709900a0e2d4eebc +AUX openvas.conf-22 43 BLAKE2B 6796e4898eacde996fe22b8921ed6a8f4f7e7d1da06caaeca7888138614a53c2d83a7fc639c8f38245c86c1c96272aa7503f8faa42994b47c6ef6a3481c7ba28 SHA512 56254f0d7f39728e5d65efff4070d935b897793000251229b1aba20afdd9602302b77ac0252846a3586e4103b5ec7a4b72d3a653cecaa26b7cdd9128ef53605b AUX openvassd.logrotate 330 BLAKE2B faf900a6882bb23c29859080d0c140c9dde8dcab42f31c31bfd43342beedab0bfe711f4e918aba5c7f8e5bb91430e251e270d0bc2e6f49e84ce98cdbbfe6d023 SHA512 397c9fd0d63ab66b463f65b6d235ec3e4e6ca52a3c811ddd4efcaeffc05fed8f9cd97605f439a628c144ecc1cfcfd31290d2a9dc6e57e8197d063b4aee63d73b +AUX redis-openvas.confd 523 BLAKE2B ad183d69731693602f73128af57b81c5ae90bbf82042f8ef1b2803fe0a6d1c6fac6e158b3f080d6b993354657c0dacd1048265934446c897709618f33bff0d85 SHA512 3535e302534f220f9756ed2ddb2b429dd96828c00e8b9858561e478ac943d9c40ecfacc917fdadf652ba15753008e23642fc0c934942aa2fa2180dee5b61569a +AUX redis-openvas.initd 720 BLAKE2B bb14cdcc693c0fbb9da1ea14332e93bc56e883cbd0e8459cfffc279bd8dce2cb93aef3ec00885b97743b046eb6c6a79f0f75c4d20881ac6115a5980ebd5ce060 SHA512 870bffa5f3e898f912283b4bc40cec63579ed56dbda0cf1991a440bdf993bb22b18178575cab03efb05774bf39690eba32b9d9920987b716ff9277a834637f04 +AUX redis-openvas.service 280 BLAKE2B 9a11408cec88a57ae71fc4a4fced63dc3d35157c979409f4db5037a9cca1c386b0521d30064a741fe5d6e8891c84bf561fcf609ef35082c6ca34ce98f4a1ee31 SHA512 3afd6b57efcbc9bd90fc88a9021094a0fc7f27bd0805077e71df1ba94de8d1687a209ac730f0014f9c3af5ddbd8a77b85ac07dd09bd98551a24f10a0791b24d1 +AUX redis-openvas.tmpfiles 63 BLAKE2B 8e3d29cef1ae0f815f7ef4da76b14168168675be4174ed1435521c26633a1f76088ab3cba5283e0c03d9f1e03abb085fdcfdb83d741f9132096df317f7f19c11 SHA512 936613951d7249c5536b4b20128bc4aef66fc05de95bece6cf2436117ed95d5dfba81cc7e16db9f765708b618a74ad83fcc52c7ccb8ccf480dd3cb4ce64cc986 DIST openvas-scanner-21.4.4.tar.gz 460601 BLAKE2B 66d627e76912735539399aed637fdc07a7d13c9e4eb142498dcf181b8ea952dd93107bcc1f2ef577126178ff3dad1e5f6e50d67840692cd49f7352e3a726ce8f SHA512 f2fe1f802b14fc41ee0d7657d031d318b651c3ec9ef554b33379a7459d40c17b44525c8f666ccb9670868576c101766936dd0c700778e46683bf43f0683834b6 +DIST openvas-scanner-22.7.2.tar.gz 924274 BLAKE2B 71b954c717f0be1634cf3561aa82c3b66af160c81b2b403b2be0d1247cad4cdfbd6779677c7d23d35c0f0e4e45b5ab30b4e1687a6b5c1b460cb034a87592b09c SHA512 cced0b3dd56cc85aa69ca7de7229c9e1a1103afd38fbf15776d29a6558c04b3e361acc3fb872f77f7f23c69339ffa25ef5ecd217ef7dafa42534547d039d8f9b EBUILD openvas-scanner-21.4.4-r2.ebuild 2780 BLAKE2B ad007b59d5f9337adadfadff50648d67b741fcd35d14dcd731ab6b7301c7ac7141487081103c1f7a54d89a2d077eca2c94a391d4b95bae855d35c5975ec00164 SHA512 2f59c429409fd5eec2163c8eef9d0e97f8a5f555ae764fb51b3591e4630fa9462d6a393f28605453eea3b7c54736da01351f1ce67565787fabbbae74e136e251 -MISC metadata.xml 955 BLAKE2B 89bbb8f84989c99ac00776d06921e3430e7865f1276139dbc87676a28133e157bca29f5c7bc077fc17ad6b8408d8aa2b967bf1a78569a516c83ff670698fccae SHA512 98c8d4c18d138b8bde6787394fe42fa4107205f8e6a262997c37e80364d7c0fea6caaeb331d3c918ac1a38f750273cf060360a5f7dd4a342cb834fc53d24d51f +EBUILD openvas-scanner-22.7.2.ebuild 3672 BLAKE2B 2398823dae5c40f2680ab0c8419a3b9846cff6f41938d16bc25c3a3281220f455a2751568f1345d43e363dd9e5a6a30ff5037e41f6f47f3b39b9a31696b57434 SHA512 3c5fd3cd44fc17599e91e861315220e72f16519af94cc627c03904ee1ab67b37d8c8cecba4fb6efb7c2c494d3ae1fff25fc2382b3dbcef946aab445245b864bb +MISC metadata.xml 1082 BLAKE2B a428b18c1fba3380a42e1120fc58c8c950900723f5cb11febdff5d86cd16bce0a17fcdb4c48867435a7c39243a7fa7e5c15ebb3fb0d6d44fc23ef56197530b6a SHA512 e41f348b1ae728e27efb71e5ebb9e468ac5d0b31526a4db922f1bc2d3f3029a5b75be2db6cbac14754107326c4af570e6673b2e66f44317677e319116daadaf6 diff --git a/net-analyzer/openvas-scanner/files/README.gentoo b/net-analyzer/openvas-scanner/files/README.gentoo new file mode 100644 index 000000000000..16547c23c7b4 --- /dev/null +++ b/net-analyzer/openvas-scanner/files/README.gentoo @@ -0,0 +1,3 @@ +The redis configuration file is located in: +/etc/gvm/redis-openvas.conf +Please apply your changes to the new configuration files. diff --git a/net-analyzer/openvas-scanner/files/openvas.conf-22 b/net-analyzer/openvas-scanner/files/openvas.conf-22 new file mode 100644 index 000000000000..b2d964ff4b53 --- /dev/null +++ b/net-analyzer/openvas-scanner/files/openvas.conf-22 @@ -0,0 +1 @@ +db_address = /run/redis-openvas/redis.sock diff --git a/net-analyzer/openvas-scanner/files/redis-openvas.confd b/net-analyzer/openvas-scanner/files/redis-openvas.confd new file mode 100644 index 000000000000..2e9ec5cfbf16 --- /dev/null +++ b/net-analyzer/openvas-scanner/files/redis-openvas.confd @@ -0,0 +1,20 @@ +# Redis user. +REDIS_USER="gvm" + +# Redis group. +REDIS_GROUP="gvm" + +# Redis configuration file. +REDIS_CONF="/etc/gvm/redis-openvas.conf" + +# Redis dump directory. +REDIS_DIR="/var/lib/gvm/redis" + +# Redis options. +# (Redis expects the first argument to be the configuration file.) +REDIS_OPTS="${REDIS_CONF}" + +# Specify the network service that corresponds to the "bind" setting +# in your redis.conf. For example, if you bind to 127.0.0.1, this should +# be set to "net.lo" which provides the loopback interface. +rc_need="net.lo" diff --git a/net-analyzer/openvas-scanner/files/redis-openvas.initd b/net-analyzer/openvas-scanner/files/redis-openvas.initd new file mode 100644 index 000000000000..5c50d29dae6a --- /dev/null +++ b/net-analyzer/openvas-scanner/files/redis-openvas.initd @@ -0,0 +1,25 @@ +#!/sbin/openrc-run +# Copyright 1999-2017 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +: ${REDIS_DIR:=/var/lib/gvm/redis} +: ${REDIS_CONF:=/etc/gvm/redis-openvas.conf} +: ${REDIS_OPTS:="${REDIS_CONF}"} +: ${REDIS_USER:=gvm} +: ${REDIS_GROUP:=gvm} +: ${REDIS_TIMEOUT:=30} + +# https://bugs.gentoo.org/631002#c10 +# Force '--daemonize no' to override the config file +command="/usr/sbin/redis-server" +command_args="${REDIS_OPTS} --daemonize no" +command_background="true" +command_user="${REDIS_USER}:${REDIS_GROUP}" +pidfile="/run/${RC_SVCNAME}/redis-server.pid" +retry="${REDIS_TIMEOUT}" +start_stop_daemon_args="--chdir \"${REDIS_DIR}\"" + +depend() { + use localmount logger + after keepalived +} diff --git a/net-analyzer/openvas-scanner/files/redis-openvas.service b/net-analyzer/openvas-scanner/files/redis-openvas.service new file mode 100644 index 000000000000..5eb8dd29e287 --- /dev/null +++ b/net-analyzer/openvas-scanner/files/redis-openvas.service @@ -0,0 +1,13 @@ +[Unit] +Description=A persistent key-value database +After=syslog.target network.target +PartOf=gvm.target + +[Service] +Type=forking +PIDFile=/run/redis-openvas/redis-server.pid +ExecStart=/usr/sbin/redis-server /etc/gvm/redis-openvas.conf +User=gvm + +[Install] +WantedBy=multi-user.target diff --git a/net-analyzer/openvas-scanner/files/redis-openvas.tmpfiles b/net-analyzer/openvas-scanner/files/redis-openvas.tmpfiles new file mode 100644 index 000000000000..6dea2932cc0b --- /dev/null +++ b/net-analyzer/openvas-scanner/files/redis-openvas.tmpfiles @@ -0,0 +1,2 @@ +# redis runtime directory +d /run/redis-openvas 0755 gvm root - diff --git a/net-analyzer/openvas-scanner/metadata.xml b/net-analyzer/openvas-scanner/metadata.xml index 20db261053a1..8b98cc0ee111 100644 --- a/net-analyzer/openvas-scanner/metadata.xml +++ b/net-analyzer/openvas-scanner/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> diff --git a/net-analyzer/openvas-scanner/openvas-scanner-22.7.2.ebuild b/net-analyzer/openvas-scanner/openvas-scanner-22.7.2.ebuild new file mode 100644 index 000000000000..fec03e1535be --- /dev/null +++ b/net-analyzer/openvas-scanner/openvas-scanner-22.7.2.ebuild @@ -0,0 +1,154 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit cmake systemd tmpfiles toolchain-funcs readme.gentoo-r1 optfeature + +MY_PN="openvas" +MY_DN="openvassd" + +DESCRIPTION="Open Vulnerability Assessment Scanner" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/openvas-scanner/" +SRC_URI="https://github.com/greenbone/openvas-scanner/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="GPL-2 GPL-2+" +KEYWORDS="~amd64 ~x86" +IUSE="doc snmp test" +RESTRICT="!test? ( test )" + +DEPEND=" + acct-user/gvm + dev-db/redis + dev-libs/glib:2 + >=dev-libs/json-glib-1.4.4 + >=net-libs/gnutls-3.2.15 + >=net-analyzer/gvm-libs-22.4 + net-libs/libpcap + app-crypt/gpgme:= + dev-libs/libgcrypt:= + dev-libs/libgpg-error + >=dev-libs/libksba-1.0.7 + >=net-libs/libssh-0.6.0 + dev-libs/libbsd + snmp? ( net-analyzer/net-snmp:= ) +" +RDEPEND="${DEPEND}" +BDEPEND=" + >=sys-devel/bison-2.5 + sys-devel/flex + virtual/pkgconfig + doc? ( + app-doc/doxygen[dot] + app-doc/xmltoman + app-text/htmldoc + dev-perl/CGI + dev-perl/SQL-Translator + virtual/pandoc + ) + test? ( dev-libs/cgreen ) +" + +src_prepare() { + cmake_src_prepare + # QA-Fix | Correct FHS/Gentoo policy paths for 7.0.0 + sed -i -e "s*/doc/openvas-scanner/*/doc/openvas-scanner-${PV}/*g" "${S}"/src/CMakeLists.txt || die + # QA-Fix | Remove !CLANG doxygen warnings for 7.0.0 + if use doc; then + if ! tc-is-clang; then + local f + for f in doc/*.in + do + sed -i \ + -e "s*CLANG_ASSISTED_PARSING = NO*#CLANG_ASSISTED_PARSING = NO*g" \ + -e "s*CLANG_OPTIONS*#CLANG_OPTIONS*g" \ + "${f}" || die "couldn't disable CLANG parsing" + done + fi + fi + + #Remove tests that doesn't work in the network sandbox + if use test; then + sed -i 's/add_test (pcap-test pcap-test)/ /g' misc/CMakeLists.txt || die + fi +} + +src_configure() { + local mycmakeargs=( + "-DLOCALSTATEDIR=${EPREFIX}/var" + "-DSYSCONFDIR=${EPREFIX}/etc" + "-DSBINDIR=${EPREFIX}/usr/bin" + "-DOPENVAS_FEED_LOCK_PATH=${EPREFIX}/var/lib/openvas/feed-update.lock" + "-DBUILD_WITH_SNMP=$(usex snmp)" + "-DPENVAS_RUN_DIR=/run/ospd" + "-DINSTALL_OLD_SYNC_SCRIPT=OFF" + ) + cmake_src_configure +} + +src_compile() { + cmake_src_compile + if use doc; then + cmake_build -C "${BUILD_DIR}" doxygen-full manual + fi + cmake_build rebuild_cache + if use test; then + cmake_build tests + fi +} + +src_install() { + if use doc; then + mv "${BUILD_DIR}"/doc/html "${BUILD_DIR}"/doc/html-manual || die + local HTML_DOCS=( + "${BUILD_DIR}"/doc/generated/html/. + "${BUILD_DIR}"/doc/html-manual + ) + fi + cmake_src_install + + insinto /etc/logrotate.d + newins "${FILESDIR}/${MY_DN}.logrotate" "${MY_DN}" + + # Set proper permissions on required files/directories + keepdir /var/log/gvm + if ! use prefix; then + fowners gvm:gvm /var/log/gvm + fi + + keepdir /var/lib/openvas/{gnupg,plugins} + if ! use prefix; then + fowners -R gvm:gvm /var/lib/openvas + fi + + insinto /etc/openvas + newins "${FILESDIR}/openvas.conf-22" openvas.conf + + systemd_newunit "${FILESDIR}/redis-openvas.service" redis-openvas.service + newtmpfiles "${FILESDIR}/redis-openvas.tmpfiles" redis-openvas.conf + + insinto /etc/gvm + doins config/redis-openvas.conf + use prefix || fowners -R gvm:gvm /etc/gvm /etc/gvm/redis-openvas.conf + fperms 0750 /etc/gvm + fperms 0644 /etc/gvm/redis-openvas.conf + + newconfd "${FILESDIR}/redis-openvas.confd" redis-openvas + newinitd "${FILESDIR}/redis-openvas.initd" redis-openvas + + if use prefix; then + diropts -m0750 + else + diropts -m0750 -o gvm -g gvm + fi + keepdir /var/lib/openvas/redis + + readme.gentoo_create_doc +} + +pkg_postinst() { + tmpfiles_process redis-openvas.conf + optfeature "port scanner" net-analyzer/nmap + readme.gentoo_print_elog +} diff --git a/net-analyzer/ospd-openvas/Manifest b/net-analyzer/ospd-openvas/Manifest index 57ba52358d94..c0b6823343f2 100644 --- a/net-analyzer/ospd-openvas/Manifest +++ b/net-analyzer/ospd-openvas/Manifest @@ -1,5 +1,10 @@ +AUX ospd-openvas-22.initd 499 BLAKE2B 413a85a48aa9812bbac9b647906a8445b6f0d7c69876cbb2cd6f9713cb4d48584672ce1d3a8c0fd8ac451a49d6106ba6c7cb58ed78947913345c5e2367ca333a SHA512 1b2122d36a851d7d810cf599a37eb40a5775ff5d084d6a31110f7c7f2d183348f99b0e4eb8adc89eb7f30c5644344c7c6116b8e90463345965fafbb9431aca4e AUX ospd-openvas.confd 226 BLAKE2B c43d443a83515f8890fd5406741a0e5e48d63fbe4e0a9060ee6c3679138ca406478f584bc8da7e24ec9520385509d3f1de609aaefb54ed36371638b2e0fa2c67 SHA512 ef07f02c3900ee431785b2c2e53f04f4fd114f502526ec509c869dcd3a95e4284fc65f05f5ec85280cc05a29a46fba9c74ef3b0b0d618b9c9c1e62d9bb3fc6fa AUX ospd-openvas.initd 491 BLAKE2B 1020cec8fba128547e7d0606c60989b74103b0d324ee72166f6d5d3f872134589f1aa9ef05e4c73215743e4d78db0c8ca4ee909d5503f64246c8b3f186952e67 SHA512 c5ca7fbff20a5f3b85e4f1c7ec22322056dee2e0800689f0fdf252d5b785eaf8db7909867fc4f6f13c53447d60e07f3d904965d7313d4bfaf58e3240f25ef00d +AUX ospd-openvas.service.conf 208 BLAKE2B b392bddb4caa281087a238c79c368bdf38439c9ddaf470e034db60d9847269966e19d6a111218fe92e6c5f05dc414ab88c0fefd1916c0d5c5bca28b30d92824a SHA512 ea1e59e1c4e6d98ca0058f42bd7454768cafb8c410611350eaaa7e232d7c580f61986f41de5fdeb752b73bd9cafd04c1e9ab44975b8d177e63537ed991418fc4 +AUX ospd-openvas.service_notus.conf 479 BLAKE2B f0c63fdd48396c39001823890aafe08228b2b37d14b81b02350b9ab0c31c02905c4b407785ca7b325f1ef48f92e38bf6f4bba287c406a274974c51d402a35dce SHA512 5d95f366f7b139717897b668e86d3f98ef98d7744106ecf456e5ba6bcf37ea6baa19a7925a46853a5f31a76c94a2537309fd944d5b99b07da19c020128937153 DIST ospd-openvas-21.4.4.tar.gz 173368 BLAKE2B 4568eb45bb999d0ff2cf91652dd56000bceb967f5c37c3061735322d1c72165f9b869c8b48694b37fd6d684679fa1bbff4a5550076bbcfcee5936b470cb04700 SHA512 3981b0a9044f90243fe06f15b0d8ee5a6b1a334556f6de76955aecda0404da2f8bd1d39bf547093a31c244f0aabae819f5e45e8c518984fc7d50764a267086e9 +DIST ospd-openvas-22.5.1.tar.gz 253605 BLAKE2B 6f4ecc31f1c47941154973bfca92818fdfe6942b5091d84234d81e287c0871f91deefc25f16790015ab1c57366b92ae42e236673c44848fdaab491caa042693f SHA512 2f92a09b4b9abced9f122eb2ac2dedf652b8c673e3d4ce5676a356da573816cd0f20769540a94919b35d6612ffb8a86b75dc704eae75c1e63150255e564e3349 EBUILD ospd-openvas-21.4.4-r4.ebuild 1902 BLAKE2B 67a71298b7506ca6906599d8e7c9edb8b6f98337f267913849a5cc112dc949559114914c0e8116cf8945e4b344ff2e15e1f4bcdab4980fa9bf849405b8b02c2f SHA512 f636d9181d96010c7367912d6421f2ab12d55df26bed987e77ab77e26d745002775ff2236c5325950e8ceaf6fc3b3746c9e0944602c0547f31b213bf8347afe3 -MISC metadata.xml 726 BLAKE2B d5d1e99e82b0b5762c13cd964c7d5cacab948f3d3062da81f74c1d08b168fc56db606f52f8c13caa2e1fc852aa2b683ded027ffee34b0918b3042b8c1e72056c SHA512 8a2f43de531fedc1ee9f498294fcfa8f30f0a2e7b725b77847d337ae53e8075e7e932f6c453eb39cdc38ad59705468fcbb8e854f7dfb08b92c8d6b243f673da9 +EBUILD ospd-openvas-22.5.1.ebuild 1952 BLAKE2B 2f172ac7eb7212ae18a6466646715e8e03cb3650260adf0cd75343c2e348b35ee25b49f491a2bc1dc7f95a1fc20811eda471a7a16cf2252bcdf77ad5cfc0564f SHA512 f4312c3fc63a87d615a2daaf78c245b662a7efcde939460a62aa7da02a2522137466f87e793c61923b755d671dc5e38f3a874bffb1f3992cd6e8dfbf0aa67af1 +MISC metadata.xml 1029 BLAKE2B 603e12bc771225baa50afc6e5254b64215055d9399c9d1862611150a49a74f397af610676ca273506f2359513b42d91786ef9f7c9100789437c00b8e59f6ccb2 SHA512 bf49f3444f277ae4b798a5c01d4c4dc5804187479774e85a9ea7481bae3b596df6f330979560ed43aa310cab72ba50dae4eeefe65a8e7dc6ada14659122ccaf7 diff --git a/net-analyzer/ospd-openvas/files/ospd-openvas-22.initd b/net-analyzer/ospd-openvas/files/ospd-openvas-22.initd new file mode 100644 index 000000000000..f43f75802729 --- /dev/null +++ b/net-analyzer/ospd-openvas/files/ospd-openvas-22.initd @@ -0,0 +1,21 @@ +#!/sbin/openrc-run +# Copyright 2020 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +name="remotely control an OpenVAS Scanner" +command=/usr/bin/ospd-openvas +pidfile="/run/${RC_SVCNAME}.pid" +command_args="${OSPD_OPENVAS_OPTIONS} \ + ${OSPD_OPENVAS_UNIX_SOCKET} \ + ${OSPD_OPENVAS_SOCKET_MODE} \ + --pid-file ${pidfile} \ + --config /etc/openvas/ospd.conf" + +depend() { + after bootmisc + need localmount redis-openvas +} + +start_pre() { + checkpath -d /var/run/ospd +} diff --git a/net-analyzer/ospd-openvas/files/ospd-openvas.service.conf b/net-analyzer/ospd-openvas/files/ospd-openvas.service.conf new file mode 100644 index 000000000000..976d81bc72bc --- /dev/null +++ b/net-analyzer/ospd-openvas/files/ospd-openvas.service.conf @@ -0,0 +1,7 @@ +[Unit] +After=network.target networking.service redis-openvas.service mosquitto.service +Wants=redis-openvas.service +PartOf=gvm.target + +[Service] +ExecStartPre=+setfacl -m u:gvm:rw /run/redis-openvas/redis.sock diff --git a/net-analyzer/ospd-openvas/files/ospd-openvas.service_notus.conf b/net-analyzer/ospd-openvas/files/ospd-openvas.service_notus.conf new file mode 100644 index 000000000000..cd8b7d8d0e70 --- /dev/null +++ b/net-analyzer/ospd-openvas/files/ospd-openvas.service_notus.conf @@ -0,0 +1,9 @@ +[Unit] +After=network.target networking.service redis-openvas.service mosquitto.service +Wants=redis-openvas.service +PartOf=gvm.target + +[Service] +ExecStartPre=+setfacl -m u:gvm:rw /run/redis-openvas/redis.sock +ExecStart= +ExecStart=/usr/bin/ospd-openvas --config /etc/gvm/ospd-openvas.conf --log-config /etc/gvm/ospd-logging.conf --lock-file-dir /var/lib/openvas --socket-mode 0o770 --mqtt-broker-address localhost --mqtt-broker-port 1883 --notus-feed-dir /var/lib/notus/advisories diff --git a/net-analyzer/ospd-openvas/metadata.xml b/net-analyzer/ospd-openvas/metadata.xml index 3f6d058084e3..18eb90f3e699 100644 --- a/net-analyzer/ospd-openvas/metadata.xml +++ b/net-analyzer/ospd-openvas/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> @@ -13,4 +17,10 @@ This is an OSP server implementation to allow GVM to remotely control OpenVAS. Once running, you need to configure OpenVAS for the Greenbone Vulnerability Manager, for example via the web interface Greenbone Security Assistant. Then you can create scan tasks to use OpenVAS. </longdescription> + <use> + <flag name="notus">Set systemd service file to use notus-scanner</flag> + </use> + <upstream> + <remote-id type="github">greenbone/ospd-openvas</remote-id> + </upstream> </pkgmetadata> diff --git a/net-analyzer/ospd-openvas/ospd-openvas-22.5.1.ebuild b/net-analyzer/ospd-openvas/ospd-openvas-22.5.1.ebuild new file mode 100644 index 000000000000..5aa80f75d415 --- /dev/null +++ b/net-analyzer/ospd-openvas/ospd-openvas-22.5.1.ebuild @@ -0,0 +1,77 @@ +# Copyright 2020-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{10..11} ) +DISTUTILS_USE_PEP517=poetry +inherit distutils-r1 systemd + +DESCRIPTION="This is an OSP server implementation to allow GVM to remotely control OpenVAS" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/ospd-openvas" +SRC_URI="https://github.com/greenbone/ospd-openvas/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +LICENSE="AGPL-3+ GPL-2+" +SLOT="0" +KEYWORDS="~amd64 ~x86" +IUSE="doc +notus" + +DEPEND=" + acct-user/gvm + dev-python/defusedxml[${PYTHON_USEDEP}] + dev-python/deprecated[${PYTHON_USEDEP}] + dev-python/lxml[${PYTHON_USEDEP}] + >=dev-python/packaging-20.4[${PYTHON_USEDEP}] + dev-python/paramiko[${PYTHON_USEDEP}] + >=dev-python/psutil-5.7.0[${PYTHON_USEDEP}] + >=dev-python/redis-3.5.3[${PYTHON_USEDEP}] + >=dev-python/python-gnupg-0.5.0[${PYTHON_USEDEP}] + dev-libs/paho-mqtt-c + app-misc/mosquitto +" +RDEPEND=" + ${DEPEND} + app-admin/sudo + >=net-analyzer/openvas-scanner-${PV} + notus? ( >=net-analyzer/notus-scanner-22.4 ) +" + +distutils_enable_tests unittest + +python_compile() { + if use doc; then + bash "${S}"/docs/generate || die + HTML_DOCS=( "${S}"/docs/. ) + fi + distutils-r1_python_compile +} + +python_install() { + distutils-r1_python_install + + insinto /etc/gvm + doins config/${PN}.conf + if ! use prefix; then + fowners -R gvm:gvm /etc/gvm + fi + + newinitd "${FILESDIR}/${PN}-22.initd" "${PN}" + newconfd "${FILESDIR}/${PN}.confd" "${PN}" + + systemd_dounit config/${PN}.service + + if use notus; then + systemd_install_serviced "${FILESDIR}/ospd-openvas.service_notus.conf" \ + ${PN}.service + else + systemd_install_serviced "${FILESDIR}/ospd-openvas.service.conf" \ + ${PN}.service + fi + + # OSPD OpenVAS attempts to call openvas via sudo as network security + # scanning often requires priviliged operations. + insinto /etc/sudoers.d + newins - openvas <<-EOF + gvm ALL = NOPASSWD: /usr/bin/openvas +EOF +} diff --git a/net-analyzer/python-gvm/Manifest b/net-analyzer/python-gvm/Manifest index f9d00b0e6cf3..e0bb24227686 100644 --- a/net-analyzer/python-gvm/Manifest +++ b/net-analyzer/python-gvm/Manifest @@ -1,3 +1,5 @@ DIST python-gvm-21.11.0.tar.gz 230324 BLAKE2B 1c4ca09f62dbeb6863e6f2da7188fd499d38ec9e1c01a2cac3534b2bff996082a5075a437e225a51bbb98f7a6ebc67062f5bd31ac1ce1a831a82bcc85f377a62 SHA512 df1fe64c65453a782dd89615cb6426a47091c82899d73855ec14174ea01ca3066a987eacb4f553c575695c6a962ec635023d0b79eafe143b564e4dfe494cc2a9 +DIST python-gvm-23.5.1.tar.gz 291456 BLAKE2B 529febe59d46079a48299c8f1e853d4d3e20fb241fbb9e4d05cb83c9bb0c6c98dc297ee2d0322789e178216c55975b8c49204273be9bf484e6304438ae171533 SHA512 4928b077bf10367b3f2c8c8fe737720c0e3c84b4df8cdf6e6ca440a442a915f8619519993200c81f4333eae32070af0b51265fdb1c224b11ae11f521d62a7f84 EBUILD python-gvm-21.11.0.ebuild 761 BLAKE2B 0e5a8075ddc010e32692ea1965fe5862ce72d670fd0ccc3a62627341809685a426ee4988fe5af22962ed9b87fa54b7131e1cfe6cb525d5c1bbe5fb6d47507115 SHA512 48e88e5c75fac44f022a9a45eb46038124f379c6beb636c77a084a61f7b1fce504d1449e5f73b42f3207de9d99e7e2952f0b4234d8451d6f33ffb02aa9b58d9e -MISC metadata.xml 910 BLAKE2B a6209f005be28029d5aa5d9da8ff7224aa477aef39fce1c5276072ee51aea61741db445707223467ad6e7a0c6a8ffdf58253245600aa3d03a87418f717c58ce2 SHA512 5ad5915c9d19c5653c47f190fa58d2b7e0ad4961218702596d5d7aa09adb6bf4e679104bf4c4e6783307e6f0b2ec71ca1027b8ecdb8edb91c22a31b3c0c90b3d +EBUILD python-gvm-23.5.1.ebuild 778 BLAKE2B 0af97dd7f91fbe31d176e88b5485540ec2b0ba05cc63ab4768077152e1ad3073db9fc716500be10939bcc69fca34b4f64c38ce9de04b71134823c8a130d32876 SHA512 a3f9c3113d62685f7812acd33a9447579afdc0f569367e16853acc0f57fb0a5cabe5c9d3c0e68c86245c9b9d6786e03b9650a1119cfc7638798d1adcfd643490 +MISC metadata.xml 1037 BLAKE2B c16435b2519ae601cc1430aa2e06937961f6fc86db1f8d0fa0800d8e81139f54e29e2d71f5fcb077161df603c2d03562d4e578fdad2acc78f215279dfa17a1e6 SHA512 575bdcf9e2cf9165398c55b82d623e6af0e3019bc0c26c3e1f6b56aacdae49cd6a9959ccb405ff9b075a44e5e7a241116a8921dda2155b81e8eccf3d0a7f5a16 diff --git a/net-analyzer/python-gvm/metadata.xml b/net-analyzer/python-gvm/metadata.xml index 488d3eec2494..fc9cf3041b5d 100644 --- a/net-analyzer/python-gvm/metadata.xml +++ b/net-analyzer/python-gvm/metadata.xml @@ -2,6 +2,10 @@ <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd"> <pkgmetadata> <maintainer type="person" proxied="yes"> + <email>foti.giuseppe@gmail.com</email> + <name>Giuseppe Foti</name> + </maintainer> + <maintainer type="person" proxied="yes"> <email>jonas.licht@gmail.com</email> <name>Jonas Licht</name> </maintainer> diff --git a/net-analyzer/python-gvm/python-gvm-23.5.1.ebuild b/net-analyzer/python-gvm/python-gvm-23.5.1.ebuild new file mode 100644 index 000000000000..22a851ada380 --- /dev/null +++ b/net-analyzer/python-gvm/python-gvm-23.5.1.ebuild @@ -0,0 +1,34 @@ +# Copyright 1999-2023 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{10..11} ) +DISTUTILS_USE_PEP517=poetry + +inherit distutils-r1 + +DESCRIPTION="Greenbone Vulnerability Management Python Library" +HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/python-gvm/" +SRC_URI="https://github.com/greenbone/python-gvm/archive/v${PV}.tar.gz -> ${P}.tar.gz" + +SLOT="0" +LICENSE="GPL-3+" +KEYWORDS="~amd64 ~x86" +RESTRICT="test" + +RDEPEND=" + dev-python/defusedxml[${PYTHON_USEDEP}] + dev-python/lxml[${PYTHON_USEDEP}] + dev-python/paramiko[${PYTHON_USEDEP}] +" +DEPEND="${RDEPEND}" + +distutils_enable_tests unittest + +src_prepare() { + distutils-r1_src_prepare + + # drop connection tests + rm -r tests/connections || die +} |