Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to update openvas feeds regularly and missing stored CVE’s under secinfo tab #4

Open
ddos16 opened this issue Aug 7, 2020 · 3 comments

Comments

@ddos16
Copy link

ddos16 commented Aug 7, 2020

Thanks

@MarksenDE
Copy link

Any update about this issue?

@tsmets
Copy link

tsmets commented Sep 3, 2020

Amof, there is an issue here ...
From the Greenbone documentation, we find https://community.greenbone.net/t/how-to-update-keep-the-feed-up-to-date/1431

root@219723dcf62a:/# ls -la   /openvas/build/tools/greenbone-nvt-sync 
-rw-r--r-- 1 root root 16836 Sep  2 09:05 /openvas/build/tools/greenbone-nvt-sync
root@219723dcf62a:/# sh /openvas/build/tools/greenbone-nvt-sync 
<28>Sep  3 12:55:11 greenbone-nvt-sync: The log facility is not working as expected. All messages will be written to the standard error stream.
/openvas/build/tools/greenbone-nvt-sync must not be executed as privileged user root

Unlike the actual scanner the sync routine does not need privileges.
Accidental execution as root would prevent later overwriting of
files with a non-privileged user.
<27>Sep  3 12:55:11 greenbone-nvt-sync: Denied to run as root
root@219723dcf62a:/# su - openvas 
$ sh /openvas/build/tools/greenbone-nvt-sync 
<28>Sep  3 12:55:32 greenbone-nvt-sync: The log facility is not working as expected. All messages will be written to the standard error stream.
touch: cannot touch '/usr/local/var/run/feed-update.lock': Permission denied
<29>Sep  3 12:55:32 greenbone-nvt-sync: No Greenbone Security Feed access key found, falling back to Greenbone Community Feed
<29>Sep  3 12:55:32 greenbone-nvt-sync: Configured NVT rsync feed: rsync://feed.community.greenbone.net:/nvt-feed
Greenbone community feed server - http://feed.community.greenbone.net/
This service is hosted by Greenbone Networks - http://www.greenbone.net/

All transactions are logged.

If you have any questions, please use the Greenbone community portal. 
See https://community.greenbone.net for details.

By using this service you agree to our terms and conditions.

Only one sync per time, otherwise the source ip will be temporarily blocked.

receiving incremental file list
rsync: failed to set times on "/usr/local/var/lib/openvas/plugins/404.inc": Operation not permitted (1)
rsync: failed to set times on "/usr/local/var/lib/openvas/plugins/CAs.inc": Operation not permitted (1)
rsync: failed to set times on "/usr/local/var/lib/openvas/plugins/bad_dsa_ssh_host_keys.txt": Operation not permitted (1)
rsync: failed to set times on "/usr/local/var/lib/openvas/plugins/bad_rsa_ssh_host_keys.txt": Operation not permitted (1)
rsync: failed to set times on "/usr/local/var/lib/openvas/plugins/bad_ssh_host_keys.inc": Operation not permitted (1)
rsync: failed to set times on "/usr/local/var/lib/openvas/plugins/bad_ssh_keys.inc": Operation not permitted (1)

so ... running as root is not accepted
running as openvas I received ERRORS

\T,

@ema07cqc
Copy link

Any news on this? Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants