diff options
Diffstat (limited to 'network/openvas-server/openvasd.conf')
| -rw-r--r-- | network/openvas-server/openvasd.conf | 163 |
1 files changed, 0 insertions, 163 deletions
diff --git a/network/openvas-server/openvasd.conf b/network/openvas-server/openvasd.conf deleted file mode 100644 index 305b045364..0000000000 --- a/network/openvas-server/openvasd.conf +++ /dev/null @@ -1,163 +0,0 @@ -# OpenVAS Security Scanner, Slackware default configuration file -# -# Empty lines and those starting with '#' are ignored. - -# Directory where plug-ins are to be found -plugins_folder = /usr/lib/openvas/plugins - -# E-mail address of the admin -email = root - -# Maximum number of hosts -max_hosts = 255 - -# Number of plugins that will run against each host, -# i.e. simultaneous tests -# Total number of processes will be max_checks x max_hosts -max_checks = 15 - -# File used to log activity. Set it to 'syslog' if you want to use syslogd. -logfile = /var/log/openvas/openvasd.messages - -# Log every detail of the attack in openvasd.messages -# If disabled only the beginning and end are logged, and -# not the time each plugin takes to execute -log_whole_attack = yes - -# Log the name of the plugins that are loaded by the server -log_plugins_name_at_load = no - -# Dump file for debugging output, use `-' for stdout -dumpfile = /var/lib/openvas/openvasd.dump - -# File that contains rules database that apply to all users -rules = /etc/openvas/openvasd.rules - -# Users database file -users = /etc/openvas/openvasd.users - -# Path where it will find information for all users -per_user_base = /var/lib/openvas/users - -# Cache folder -cache_folder = /var/cache/openvas - -# CGI paths to check for (cgi-bin:/cgi-aws:/ can do) -cgi_path = /cgi-bin - -# Optimize the test -optimize_test = yes - -# Read timeout (in seconds) for the sockets of the tests -# Increase this value if running on a slow network link (dialup) -checks_read_timeout = 15 - -# Delay (in seconds) to pass for between two tests against the same port -# (to be inetd friendly) -delay_between_tests = 1 - -# Do not run simultaneous ports for these tests. Default value: -# non_simul_ports = 139, 445 - -# Remote file that the plugins will try to read: -test_file = /etc/passwd - -# Range of the ports that nmap will scan -port_range = 1-15000 - -# Ping hosts before scanning them? -ping_hosts = yes - -# Only test the IPs that can be reversely looked up? -reverse_lookup = no - -# Host expansion: -# dns: performs and AXFR on the remote name server -# and test the host obtained -# nfs: test hosts that have the right to mount the -# filesystems exported by the remote host -# ip: scan the entire subnet -host_expansion = dns;ip - -subnet_class = C - -# Use the MAC address as host identifier (useful in -# local LANs with dynamic addresses, e.g. DHCP) -# use_mac_addr = yes - -# Slice the network IPs into portions and rotate them -# between scanning each slice. Instead of the (default) -# behaviour of scanning a network incrementally. -# slice_network_addresses = yes - -scan_level = normal -outside_firewall = no - -# Enable plugins that are depended on -# auto_enable_dependencies = yes - -# Enable safe checks (this overrides the client's configuration) -# safe_checks = yes - -# Allow users to upload plugins to the server -# Note: This effectively gives administrative permissions -# to OpenVAS users and, when using local checks, could grant -# them execute permissions in remote systems, so use with care! -plugin_upload = no - -# Filename suffixes that are allowed when uploading -# plugin_upload_suffixes = .nasl, .inc - -# Language to use in plugins. -# Current valid options are 'english' and 'french' -language = english - -# Public key client server encryption (crypto options) -peks_username = openvasd -peks_keylen = 1024 -peks_keyfile = /etc/openvas/openvasd.private-keys -peks_usrkeys = /etc/openvas/openvasd.user-keys -peks_pwdfail = 5 -track_iothreads = yes -cookie_logpipe = /etc/openvas/openvasd.logpipe -cookie_logpipe_suptmo = 2 -# Define SSL version, use NONE to disable SSL -# ssl_version = 3 -# Full path and filename of a trusted certificate authority -# see /usr/share/doc/openvas/README_SSL.gz -# trusted_ca = - -# SSL Ciphers to use -# The following removes all SSLv3 ciphers except RC4. -# This has been implemented to workaround an OpenSSL 0.9.8 -# bug, for more information please read -# http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338006 -# and -# http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343487 -# ssl_cipher_list = SSLv2:-LOW:-EXPORT:RC4+RSA - -# NASL scripts cryptographic checks of some plugins (trusted -# scripts). OpenVAS will refuse to load and execute trusted -# scripts that are not signed. Use extreme caution when -# setting this to 'yes' -#nasl_no_signature_check = no -nasl_no_signature_check = yes - -# Uncomment the following for IO thread debugging -#track_iothreads = yes - -# Set this to 'yes' if you want each child to be nice(2)d -# be_nice = yes - -# End of /etc/openvas/openvasd.conf file. -# -# Added by openvas-mkcert -# -cert_file=/var/lib/openvas/CA/servercert.pem -key_file=/var/lib/openvas/private/CA/serverkey.pem -ca_file=/var/lib/openvas/CA/cacert.pem -# If you decide to protect your private key with a password, -# uncomment and change next line -# pem_password=password -# If you want to force the use of a client certificate, uncomment next line -# force_pubkey_auth = yes |