Description

Install and configure OpenVAS ( Open Vulenability Assessment System ); a fork of the Nessus project.

Project homepage can be found here

Requirements

It's recommended to create a role and apply it to your node definition.

Here's an example role to install an OpenVAS server. <pre><code> name "openvas_scanner" description "Install/Configure an OpenVAS Server" run_list "recipe[openvas::server]" override_attributes "openvas_scanner" => { } </pre></code>

Now upload your role like so: <pre><code> knife role from file roles/openvas_scanner.json </pre></code>

Here's an example role to install an OpenVAS Scanner and automatically enable NVT updates. <pre><code> name "openvas_scanner" description "Install/Configure an OpenVAS Server" run_list "recipe[openvas::server]" override_attributes "openvas" => { "enable_nvt_updates_from_cron" => "yes" } </pre></code>

Don't forget to apply your role to your node's definition <pre><code> { "normal": { }, "name": "ovasscanner", "override": { }, "prod_web": { }, "json_class": "Chef::Node", "automatic": { }, "run_list": [ "role[openvas_scanner]" ], "chef_type": "node" } </pre></code>

Here's an example role to install only an OpenVAS client. <pre><code> name "openvas_client" description "Install/Configure an OpenVAS client" run_list "recipe[openvas::client]" override_attributes "openvas_scanner" => { } </pre></code>

Now upload your role like so: <pre><code> knife role from file roles/openvas_client.json </pre></code>

NOTE ABOUT ADMIN/PASSWORD

The default admin user name and password is written to /etc/openvas/openvas_admin_pass.txt.

Attributes

Set to "yes" to add entry to super user root's CRON tab. <pre><code> default['openvas']['enable_nvt_updates_from_cron'] = "yes" </pre></code>