[Openvas-discuss] OpenVAS Scannings - Not scanning correctly?
Joe.Madden at mottmac.com
Mon Jul 14 17:23:09 CEST 2014
I'm not entirely sure that this has fixed my problem. The scan completed very quickly still with Selinux in permissive mode - no results either.
Does anyone have any other ideas?
Scott, Thanks for that tip - I will bare that in mine once I've gotten it working.
From: William Scott Lockwood III [mailto:vladinator at gmail.com] On Behalf Of W Scott Lockwood III
Sent: 14 July 2014 16:09
To: Madden, Joe
Subject: Re: [Openvas-discuss] OpenVAS Scannings - Not scanning correctly?
On Mon, 2014-07-14 at 16:06 +0100, Madden, Joe wrote:
> Doh! Such a simple thing - Didn’t even cross my mind! I will put it
> into permissive and use the logs to build a working selinux policy.
> Thank you.
That will work, but be aware, as new signatures come out, and new tests are deployed, you will have a constant battle of wondering why things don't work. I would suggest that you have one machine that you use for production scans, and one for development that always runs in permissive mode. Apply updates to the dev machine first, generate policy, and deploy it to the second machine. This can be a lot of work, depending on how often you plan to update the production scanner.
William Scott Lockwood III
More information about the Openvas-discuss