Description

Install and configure OpenVAS ( Open Vulenability Assessment System ); a fork of the Nessus project.

Project homepage can be found here

Requirements

It's recommended to create a role and apply it to your node definition.

Here's an exammple role to enable all things provided by this cookbook. This is the recommended method. Note: Including recipe openvas::nmap before openvas::server is required since it's a requirement. <pre><code> name "openvas_server" description "Install & configure an OpenVAS server." override_attributes "openvas" => { "enable_nvt_updates_from_cron" => "yes", "gsad_port" => "9392", "enable_greenbone_scan_configs" => "yes", "nasl_no_signature_check" => "no" } run_list [ "recipe[openvas::nmap]", "recipe[openvas::server]" ] </pre></code>

Here's an example role to install an OpenVAS server. <pre><code> name "openvas_scanner" description "Install/Configure an OpenVAS Server" override_attributes "openvas_scanner" => { } run_list [ "recipe[openvas::nmap]", "recipe[openvas::server]" ]
override_attributes "openvas_scanner" => { } </pre></code>

Now upload your role like so: <pre><code> knife role from file roles/openvas_scanner.json </pre></code>

Here's an example role to install an OpenVAS Scanner and automatically enable NVT updates. <pre><code> name "openvas_scanner" description "Install/Configure an OpenVAS Server" override_attributes "openvas" => { "enable_nvt_updates_from_cron" => "yes" } run_list [ "recipe[openvas::server]", "recipe[openvas::nmap]" </pre></code>

Don't forget to apply your role to your node's definition <pre><code> { "normal": { }, "name": "ovasscanner", "override": { }, "prod_web": { }, "json_class": "Chef::Node", "automatic": { }, "run_list": [ "role[openvas_scanner]" ], "chef_type": "node" } </pre></code>

Here's an example role to install only an OpenVAS client. <pre><code> name "openvas_client" description "Install/Configure an OpenVAS client" run_list "recipe[openvas::client]" override_attributes "openvas_scanner" => { } </pre></code>

Now upload your role like so: <pre><code> knife role from file roles/openvas_client.json </pre></code>

NOTE ABOUT ADMIN/PASSWORD

The default admin user name and password is written to /etc/openvas/openvas_admin_pass.txt.

Attributes

Set to "yes" to add entry to super user root's CRON tab. <pre><code> default['openvas']['enable_nvt_updates_from_cron'] = "yes" </pre></code>